TL; DR: OpenID Connect (OIDC) support has been released as a beta Enterprise Connection in Auth0. This release will make it simple to federate authentication to identity providers that support OIDC.

"#OIDC support has been released as a beta Enterprise Connection in Auth0!"

What is OpenID Connect?

OIDC is an authentication protocol, based on the OAuth 2.0 family of specifications. While OAuth 2.0 is focused on resource access and sharing, OIDC is focused on user authentication.

For example, if you sign into an application using your Google account via OIDC, Google will authenticate you and return identity information about you and the authentication performed to the application. OIDC is designed to be easy to use for federation and most modern enterprise identity providers support it, including Microsoft, Google, and Salesforce. Learn more about OpenID in this free OIDC Handbook - eBook.

What Are We Releasing?

We released an OIDC Enterprise Connection as a beta feature for all customers with an Auth0 Developer Pro or Enterprise license. This connection will allow you to easily federate authentication to any OIDC-compliant identity providers. More specifically, any identity provider that implements OpenID Connect Discovery and supports the id_token response type and form_post response mode.

Configuration is simple. Here is an example:



Auth0 uses the issuer URL to find the OpenID Provider Configuration Document, which should be located in the /.well-known/openid-configuration endpoint. In the example above, Auth0 is connecting to Azure Active Directory (Azure AD) using the OIDC connection.

Once it is saved and enabled, a button will appear in the login page. When clicked, the button redirects to the Azure AD login page:

An image showing OIDC Enterprise Connection in action

Additional settings can be configured, including:

  • Connection Display name

  • Custom logo on the login page

  • Domains to be used for Home Realm Discovery 

  • Scopes

How Do I Get Started?

Because it is an Enterprise Connection, the OIDC connection requires an Auth0 Developer Pro or Enterprise license. You can configure the connection in the Auth0 Management Dashboard by clicking Connections > Enterprise > OpenID Connect. For more information, check out the docs and the OpenID Connect Handbook.

"Easily federate authentication to any OIDC-compliant identity providers with Auth0's #OIDC Enterprise connection"

This is a beta feature. We welcome your feedback. Please comment on this post in the Auth0 Community.

About Auth0

Auth0, the identity platform for application builders, provides thousands of customers in every market sector with the only identity solution they need for their web, mobile, IoT, and internal applications. Its extensible platform seamlessly authenticates and secures more than 2.5 billion logins per month, making it loved by developers and trusted by global enterprises. The company's U.S. headquarters in Bellevue, WA, and additional offices in Buenos Aires, London, Tokyo, and Sydney, support its global customers that are located in 70+ countries.

For more information, visit https://auth0.com or follow @auth0 on Twitter.