Identity Enterprise SSO integration with Auth0

Prerequisites

To be able to manage applications, you must have an Auth0 account with an Admin role.

Register a new application in Auth0

1. Sign in to the Auth0 Dashboard at https://manage.auth0.com.
   • If you have multiple tenants, switch to the correct tenant.
2. Go to Applications > Applications, then click Create Application.
3. In the Create application dialog, do the following:
   • For Name, enter the name of the application. For example "commercetools Identity".
   • For application type, select Regular Web Applications.
4. Click Create.
5. On the New Application > Settings page, do the following:
   • For Allowed callback URLs, enter the Redirect URI of Identity as displayed in the SSO configuration form. The value is dependent on the PKCE option. By default it's https://auth.identity.commercetools.com/self-service/methods/oidc/callback as we force the use of PKCE. If you select another PKCE option (auto or disable) the Redirect URI changes.
   • In the Advanced Settings > Grant Types tab (at the bottom of the screen), make sure that Authorization Code is selected. You can deselect the other options.
6. Click Save.
7. Copy the Client ID and Client Secret.
8. Determine the Issuer URL in the format: https://{tenant}.{region}.auth0.com
   • You can confirm it under Advanced Settings > Endpoints > OpenID Configuration (remove the /.well-known/openid-configuration suffix).

Values to collect

You will need these when configuring Enterprise SSO in Identity:

• Issuer URL
• Client ID
• Client Secret
• Redirect URI (from the Identity SSO configuration form)

Next steps

Other resources

• Identity Enterprise SSO overview