Azure Blob Storage


Please follow the steps below to configure your Auth0 account to work with .

1. Activate the add-on.

Go to Application Add-ons page and activate the add-on.

Each integration is different and requires different parameters and configuration. Once the add-on is activated, you will see tailored instructions with details on how to get this done.

2. Use it

The key to this integration is the Delegation endpoint in Auth0. Check the documentation of any of our FrontEnd or Mobile SDKs to learn how to call this endpoint. You can download your favorite library from any of the Quickstarts.

3. You are done!

Congrats! You've implemented Delegation for the API

Additional Information

Here's a sample call to the delegation endpoint to get the SAS:

POST https://YOUR_NAMESPACE/delegation
Content-Type: 'application/json'
  "client_id":   "YOUR_CLIENT_ID",
  "grant_type":  "urn:ietf:params:oauth:grant-type:jwt-bearer",
  "id_token":    "{YOUR_ID_TOKEN}",
  "target":      "YOUR_CLIENT_ID",
  "api_type":    "azure_blob",
  "scope":       "openid"
  • The client_id value identifies the requesting app (e.g. your website) and {YOUR_ID_TOKEN} identifies the user you are requesting this on behalf-of. (Notice that the id_token is signed with the client_id corresponding clientSecret).
  • The target parameter identifies this API endpoint in Auth0 (often the same as {CLIENT ID}. This is the client_id of the app where this add-on has been enabled.
  • api_type must be azure_blob.
  • scope must be openid.

The result of calling the delegation endpoint will be something like:

  "azure_blob_sas": "st=2015-01-08T18%3A45%3A14Z&se=2015-01-08T18%3A50%3A14Z&sp=r&sv=2014-02-14&sr=b&sig=13ABC456..."

You can use the blob SAS token either by appending it to a url directly or by passing it to one of the Azure Storage SDKs.

Try Auth0 for FREECreate free Account