Community
Questions Library
Docs
Blog
Events
Swag
Github
Slack
JupiterOne
Discussions
Release Notes
Contact Us
Auth0 - AskJ1 Community
<main> <article class="userContent"> <h2 data-id="auth0-jupiterone-integration-benefits">Auth0 + JupiterOne Integration Benefits</h2> <ul><li>Visualize Auth0 clients (applications) and users in the JupiterOne graph.</li> <li>Map Auth0 users to employees in your JupiterOne account.</li> <li>Monitor changes to Auth0 users using JupiterOne alerts.</li> </ul><h2 data-id="how-it-works">How it Works</h2> <ul><li><p>JupiterOne periodically fetches clients and users from Auth0 to update the<br> graph.</p></li> <li><p>Write JupiterOne queries to review and monitor updates to the graph, or<br> leverage existing queries.</p></li> <li><p>Configure alerts to take action when JupiterOne graph changes, or leverage<br> existing alerts.</p></li> </ul><h2 data-id="requirements">Requirements</h2> <ul><li><p>Auth0 supports the OAuth2 Client Credential flow. You will need to have access<br> to the Auth0 management dashboard and be able to enable permissions for a<br> Machine-to-Machine application.</p></li> <li><p>You must have permission in JupiterOne to install new integrations.</p></li> </ul><h2 data-id="support">Support</h2> <p>If you need help with this integration, please contact<br><a rel="nofollow" href="https://support.jupiterone.io">JupiterOne Support</a>.</p> <h2 data-id="integration-walkthrough">Integration Walkthrough</h2> <h3 data-id="in-auth0">In Auth0</h3> <ol><li>From the dashboard at<br><a href="https://manage.auth0.com/dashboard/{YOURREGION}/{YOURDOMAIN}" rel="nofollow">https://manage.auth0.com/dashboard/{YOURREGION}/{YOURDOMAIN}</a>, select<br> Applications. Under Applications, select Applications.</li> <li>You can use the default Auth0 Management API (Test Application) Machine to<br> Machine application, or you can create your own Machine to Machine<br> application to connect to the Auth0 Management API.</li> <li>Go to the settings tab for your chosen Machine to Machine application and<br> make note of the Client ID and Client Secret.</li> <li>Go to the APIs tab for your chosen Machine to Machine application and ensure<br> that the Auth0 Management API is set to Authorized.</li> <li>To the right of the Authorized slider, click the downward arrow to expand the<br> permissions settings for the application. Filter permissions by "read",<br> select <code class="code codeInline" spellcheck="false" tabindex="0">read:users</code> and <code class="code codeInline" spellcheck="false" tabindex="0">read:clients</code>, and hit Update.</li> </ol><h3 data-id="in-jupiterone">In JupiterOne</h3> <ol><li>From the top navigation of the J1 Search homepage, select <strong>Integrations</strong></li> <li>Scroll to the <strong>Auth0</strong> integration tile and click it.</li> <li>Click the <strong>Add Configuration</strong> button and configure the following settings:</li> </ol><ul><li><p>Enter the <strong>Account Name</strong> by which you'd like to identify this {{provider}}<br> account in JupiterOne. Ingested entities will have this value stored in<br><code class="code codeInline" spellcheck="false" tabindex="0">tag.AccountName</code> when <strong>Tag with Account Name</strong> is checked.</p></li> <li><p>Enter a <strong>Description</strong> that will further assist your team when identifying<br> the integration instance.</p></li> <li><p>Select a <strong>Polling Interval</strong> that you feel is sufficient for your monitoring<br> needs. You may leave this as <code class="code codeInline" spellcheck="false" tabindex="0">DISABLED</code> and manually execute the integration.</p></li> <li><p>Enter the <strong>Auth0 Client ID</strong> for the Machine-to-Machine application<br> designated for JupiterOne's use.</p></li> <li><p>Enter the <strong>Auth0 Client Secret</strong> for the Machine-to-Machine application<br> designated for JupiterOne's use.</p></li> <li><p>Enter the <strong>Auth0 Domain</strong> for your Auth0 tenant. Format is typically<br><code class="code codeInline" spellcheck="false" tabindex="0">{YOURDOMAIN}.{REGION}.auth0.com</code>. Do not include <code class="code codeInline" spellcheck="false" tabindex="0">https://</code>. If you are using<br> a custom domain (e.g. 'mycustomdomain.com'), you can use it here.</p></li> <li><p>Enter the <strong>Auth0 Audience</strong> for your Auth0 tenant, which points to the<br> specific API you will be using. Format must be an auth0.com subdomain,<br> followed by <code class="code codeInline" spellcheck="false" tabindex="0">/api/{version}/</code>. Examples might be<br><code class="code codeInline" spellcheck="false" tabindex="0">https://{YOURDOMAIN}.{REGION}.auth0.com/api/v2/</code> or<br><code class="code codeInline" spellcheck="false" tabindex="0">https://{YOURDOMAIN}.auth0.com/api/v2/</code>. Even if you are using a custom<br> domain with Auth0, you need to use your default Auth0 tenant domain here.<br> Also, the trailing slash is necessary.</p></li> </ul><ol start="4"><li>Click <strong>Create Configuration</strong> once all values are provided.</li> </ol><h1 data-id="how-to-uninstall">How to Uninstall</h1> <ol><li>From the top navigation of the J1 Search homepage, select <strong>Integrations</strong></li> <li>Scroll to the <strong>Auth0</strong> integration tile and click it.</li> <li>Identify and click the <strong>integration to delete</strong>.</li> <li>Click the <strong>trash can</strong> icon.</li> <li>Click the <strong>Remove</strong> button to delete the integration.</li> </ol><p><br></p> <h2 data-id="data-model">Data Model</h2> <h3 data-id="entities">Entities</h3> <p>The following entities are created:</p> <table><thead><tr><th>Resources</th> <th>Entity <code class="code codeInline" spellcheck="false" tabindex="0">_type</code></th> <th>Entity <code class="code codeInline" spellcheck="false" tabindex="0">_class</code></th> </tr></thead><tbody><tr><td>Auth0 Account</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">auth0_account</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">Account</code></td> </tr><tr><td>Auth0 Client</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">auth0_client</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">Application</code></td> </tr><tr><td>User</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">auth0_user</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">User</code></td> </tr></tbody></table><h3 data-id="relationships">Relationships</h3> <p>The following relationships are created/mapped:</p> <table><thead><tr><th>Source Entity <code class="code codeInline" spellcheck="false" tabindex="0">_type</code></th> <th>Relationship <code class="code codeInline" spellcheck="false" tabindex="0">_class</code></th> <th>Target Entity <code class="code codeInline" spellcheck="false" tabindex="0">_type</code></th> </tr></thead><tbody><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">auth0_account</code></td> <td><strong>HAS</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">auth0_client</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">auth0_account</code></td> <td><strong>HAS</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">auth0_user</code></td> </tr></tbody></table><p><br></p> </article> </main>
.png)