Auth0 Setup

Use this guide when an SME, Educational Institute, or ISP uses Auth0 and wants WispHive to host the login entry URL.

Provider field mapping

Field	Auth0 value
provider_name	auth0
oauth_authorize_url	https://{tenant}/authorize
oauth_token_url	https://{tenant}/oauth/token
oauth_jwks_url	https://{tenant}/.well-known/jwks.json
oauth_client_id	Auth0 application client ID
oauth_client_secret	Auth0 application client secret
oauth_audience	API identifier when access tokens are audience-bound

Example request

{
  "registration_id": "sme_1ab23cd45ef6",
  "entity_name": "Acme SME",
  "provider_name": "auth0",
  "oauth_authorize_url": "https://acme.eu.auth0.com/authorize",
  "oauth_token_url": "https://acme.eu.auth0.com/oauth/token",
  "oauth_jwks_url": "https://acme.eu.auth0.com/.well-known/jwks.json",
  "oauth_client_id": "replace-with-client-id",
  "oauth_client_secret": "replace-with-client-secret",
  "oauth_audience": "https://api.acme.example"
}

Auth0 dashboard configuration

1. Create or open a Regular Web Application.
2. Add the returned callback_url to Allowed Callback URLs.
3. Use the returned hosted_login_url in the captive portal.
4. If you protect an API, make sure oauth_audience matches the configured API Identifier.