Auth0

Guide to Setting Up SSO with Auth0

A flexible, drop-in solution to add authentication and authorisation services to your applications. Auth0 is often categorised as Identity-as-a-Service (IDaaS) and is a cloud-based solution. It offers a range of services, including but not limited to, single sign-on, multi-factor authentication, password-less login, and user management. Benefits of Auth0:

1. Platform Agnostic: Unlike ADFS, Auth0 is not tied to any specific operating system or suite of tools. This makes it highly versatile and suitable for a wider range of applications.

2. Cloud-Based: As a cloud-based service, it's easier to scale and has lower upfront costs compared to a self-hosted solution like ADFS.

3. Feature-Rich: Auth0 offers a host of features, including social login options, multi-factor authentication, and breach detection.

You'll need to create an Auth0 account before you can set up SSO on your Synap platform, head over to https://auth0.com/ to learn more and get started for free.

US Infrastructure is a Synap Enterprise only feature, please note if you are based in the US you are not automatically moved to US infrastructure and will need to use EU links in your set up.

EU Infrastructure Callback URL:
https://api.synap.ac/external-auth/auth0/authenticate

US Infrastructure Callback URL:
https://use1.prod.api.synap.ac/external-auth/auth0/authenticate

1. Create an application in Auth0

Follow the steps in Auth0's documentation to create an application. You'll need to go to applications, create application. Make sure you create a Regular Web Application.

Auth0 Applications page

Select Regular Web Application in Auth0

When you create the application, there is an option to give more details but you can ignore this and go to settings to get the information you need to put back into Synap.

From the Settings>Authentication page, add a new connection, select Auth0 as the authentication method. Give the configuration the appropriate label (what your users will see on the button on the login page) and a name.

Synap adding a new SSO configuration

You will now need to go back to your application on Auth0 and get the following information:

• Domain

• Client ID

• Client secret

Copy each of these and put them back into Synap and save.

Copy over the details from Auth0 to Synap

From the Auth0 settings page for your application you can also upload a logo and add in the different connections you want to use, once done save your changes. Now open your connection on Synap, you need to get the Callback URL to put into Auth0 in the Settings>Application URIs>Allowed Callback URLs and save

Getting the callback URL into Auth0

Once all this is done you can save and enable the connection on Synap.

enabling an Auth0 connection

You may need to setup your admin account as a user on Auth0 if you're going to disable local login. Using the main menu, navigate to users and create a user with the same email you use to login to Synap with. More in Auth0 docs

Creating a user in Auth0

From here you SSO is ready to go, in Auth0 you can select from predefined connections and enable them right away (Google, Facebook, Microsoft) or add in your own custom one.