import ConfigDone from '/docs/snippets/u-and-p-provider-config-done.md'

Auth0 provider setup for Users & Permissions#

Auth0 provider setup enables OAuth 2.0 authentication for the Users & Permissions feature, requiring configuration in both Auth0 tenant and Strapi admin settings using Client ID, Client Secret, and subdomain credentials.

The present page explains how to setup the Auth0 provider for the Users & Permissions feature.

You have read the Users & Permissions providers documentation.

Auth0 configuration#

1. Visit your Auth0 tenant dashboard
2. In API section, create a new API
3. In application, create a machine-to-machine application and select the API that you have just created
4. In settings of this app set these values:
   • Allowed Callback URLs: http://localhost:1337/api/connect/auth0/callback
   • Allowed Logout URLs: http://localhost:3000
   • Allowed Web Origins: http://localhost:3000
5. At the bottom of settings, show "Advanced Settings" and go to the "Grant Types". Ensure that these grants are checked/enabled:
   • Implicit
   • Authorization Code
   • Refresh Token
   • Client Credentials

Strapi configuration#

1. Visit the User & Permissions provider settings page at
2. Click on the Auth0 provider
3. Fill the information:
   • Enable: ON
   • Client ID: <Your Auth0 Client ID>
   • Client Secret: <Your Auth0 Client Secret>
   • Subdomain: <Your Auth0 tenant url>, example it is the part in bold in the following url: https://my-tenant.eu.auth0.com/
   • The redirect URL to your front-end app: http://localhost:3000/connect/auth0