Skip to content

Authentication — Auth0

Approach

Auth0 is the default authentication configured by the Forra team during the initial deployment. It lets the first administrators sign in immediately while a permanent SSO provider (Microsoft, Google, or Okta) is being set up.

The Auth0 tenant and the associated OAuth application are managed by Forra. You normally have nothing to configure here — the Auth0 card in Tenant Admin → External Services → Authentication Providers is pre-filled at delivery.

Migration to a permanent provider

Once Microsoft, Google, or Okta is configured and tested, remove the Auth0 configuration so only one authentication provider remains active. This prevents users from continuing to sign in via the transitional mode.

  1. Tenant Admin → External Services → Authentication Providers.
  2. Open the Auth0 card.
  3. Click the trash icon in the top right to clear the configuration.
  4. Save.

Manual configuration (advanced)

Use this only if you want to use your own Auth0 tenant rather than the one managed by Forra — for example to integrate Forra into an existing enterprise Auth0 ecosystem.

1. Configure the Auth0 application

In the Auth0 dashboard, create an application of type Single Page Application:

  • Allowed Callback URLs: https://{your-scout-domain}/auth0/login/callback
  • Allowed Logout URLs: https://{your-scout-domain}
  • Allowed Web Origins: https://{your-scout-domain}
  • Grant Types: Authorization Code with PKCE

Take note of:

  • Domain of the Auth0 tenant (e.g., myorg.auth0.com or myorg.us.auth0.com)
  • Client ID

2. Configure Forra

In Tenant Admin → External Services → Authentication Providers, open the Auth0 card and enter:

  • Base URL: https://{Auth0 domain}
  • Client ID: {Client ID}

Save.

No client secret is required: Forra uses the SPA flow with PKCE.