Applications

ID of this client

Name of the tenant this client belongs to

Name of this client (min length: 1 character, does not allow< or >)

Free text description of this client (max length: 140 characters)

Whether this is your global 'All Applications' client representing legacy tenant settings (true) or a regular client (false)

Client secret (which you must not make public)

The type of application this client represents

URL of the logo to display for this client. Recommended size is 150x150 pixels

Whether this client a first party client (true) or not (false)

Whether this client conforms to strict OIDC specifications (true) or uses legacy features (false)

Comma-separated list of URLs whitelisted for Auth0 to use as a callback to the client after authentication

Comma-separated list of URLs allowed to make requests from JavaScript to Auth0 API

Comma-separated list of allowed origins for use with Cross-Origin Authentication, Device Flow, and web message response mode

List of audiences/realms for SAML protocol. Used by the wsfed addon

List of allow clients and API ids that are allowed to make delegation requests

Comma-separated list of URLs that are valid to redirect to after logout from Auth0

Native to Web SSO Configuration

Configuration for OIDC backchannel logout

List of grant types supported for this application

Configuration related to JWTs for the client

Signing certificates associated with this client

Encryption used for WsFed responses with this client

Applies only to SSO clients and determines whether Auth0 will handle Single Sign On (true) or whether the Identity Provider will (false)

Whether Single Sign On is disabled (true) or enabled (true). Defaults to true

Whether this client can be used to make cross-origin authentication requests (true) or it is not allowed to make such requests (false)

URL of the location in your site where the cross origin verification takes place for the cross-origin auth flow when performing Auth in your own domain

Whether a custom login page is to be used (true) or the default provided login page (false)

The content (HTML, CSS, JS) of the custom login page

The content (HTML, CSS, JS) of the custom login page. (Used on Previews)

HTML form template to be used for WS-Federation

Addons enabled for this client and their associated configurations

Defines the requested authentication method for the token endpoint

If true, trust that the IP specified in the auth0-forwarded-for header is the end-user's IP for brute-force-protection on token endpoint

Metadata associated with the client, in the form of an object with string values (max 255 chars)

Additional configuration for native mobile apps

Initiate login uri, must be https

Native social login configuration

Refresh token configuration

Defines the default Organization ID and flows

Defines how to proceed during an authentication transaction with regards an organization

Defines how to proceed during an authentication transaction when client.organization_usage: 'require'

Defines the available methods for organization discovery during the pre_login_prompt

Defines client authentication methods

Makes the use of Pushed Authorization Requests mandatory for this client

Makes the use of Proof-of-Possession mandatory for this client

JWT-secured Authorization Requests (JAR) settings

Defines the compliance level for this client, which may restrict it's capabilities

Controls whether a confirmation prompt is shown during login flows when the redirect URI uses non-verifiable callback URIs

Configuration for token exchange

Specifies how long, in seconds, a Pushed Authorization Request URI remains valid

Token quota configuration

Application specific configuration for use with the OIN Express Configuration feature

The identifier of the resource server that this client is linked to

Array of notification channels for contacting the user when their approval is required