Android Login

This tutorial shows you how to integrate Auth0 in your Android project and present the login box.

Sample Project

Download a sample project specific to this tutorial configured with your Auth0 API Keys.

System Requirements
  • Android Studio 2.3
  • Android SDK 25
  • Emulator - Nexus 5X - Android 6.0
Show requirements

Add the Auth0 Android Dependency

Add the Auth0 Android SDK into your project. The library makes requests to the Auth0's Authentication and Management APIs.

Add Auth0 to Gradle

In your app's build.gradle dependencies section, add the following:

apply plugin: ''
android {
dependencies {
  //---> Add the next line
  compile ''

You can check for the latest version on the repository Readme, in Maven, or in JCenter.

Add manifest placeholders required by the SDK. The placeholders are used internally to define an intent-filter that captures the authentication callback URL.

To add the manifest placeholders, add the next line:

apply plugin: ''
android {
    compileSdkVersion 25
    buildToolsVersion "25.0.3"
    defaultConfig {
        applicationId "com.auth0.samples"
        minSdkVersion 15
        targetSdkVersion 25

        //---> Add the next line
        manifestPlaceholders = [auth0Domain: "@string/com_auth0_domain", auth0Scheme: "demo"]

Run Sync Project with Gradle Files inside Android Studio or execute ./gradlew clean assembleDebug from the command line.

For more information about using Gradle, check the Gradle official documentation.

Start the Authentication

The Auth0 hosted login page is the easiest way to set up authentication in your application. We recommend using the Auth0 hosted login page for the best experience, best security and the fullest array of features.

You can also embed the Lock widget directly in your application. If you use this method, some features, such as single sign-on, will not be accessible. To learn how to embed the Lock widget in your application, follow the Embedded Login sample.

Read the Browser-Based vs. Native Login Flows on Mobile Devices article to learn how to choose between the two types of login flows.

In the login method, create a new instance of the Auth0 class to hold user credentials.

You can use a constructor that receives an Android Context if you have added the following String resources:

  • R.string.com_auth0_client_id
  • R.string.com_auth0_domain

If you prefer to hardcode the resources, use the constructor that receives both strings. Then, use the WebAuthProvider class to authenticate with any connection you enabled on your client in the Auth0 dashboard.

You need to make sure you get a response compliant with the OpenID Connect protocol. You can choose between two options:

  • Set the audience
  • Turn on the OIDC conformant switch in your Auth0 dashboard

To turn on the OIDC conformant switch, in your Client Settings, click on Show Advanced Settings > OAuth.

After you call the WebAuthProvider#start function, the browser launches and shows the Lock widget. Once the user authenticates, the callback URL is called. The callback URL contains the final result of the authentication process.

// app/src/main/java/com/auth0/samples/

private void login() {
    Auth0 auth0 = new Auth0(this);
                  .withAudience(String.format("https://%s/userinfo", getString(R.string.com_auth0_domain)))
                  .start(MainActivity.this, new AuthCallback() {
                      public void onFailure(@NonNull Dialog dialog) {
                        // Show error Dialog to user

                      public void onFailure(AuthenticationException exception) {
                        // Show error to user

                      public void onSuccess(@NonNull Credentials credentials) {
                          // Store credentials
                          // Navigate to your main activity

Capture the Result

Whitelist the callback URL for your app in the Allowed Callback URLs section in Client settings. In that section, enter the following URL:


Replace YOUR_APP_PACKAGE_NAME with your application's package name, available in the app/build.gradle file as the applicationId attribute.

After authentication, the browser redirects the user to your application with the authentication result. The SDK captures the result and parses it.

You do not need to declare a specific intent-filter for your activity, because you have defined the manifest placeholders with your Auth0 Domain and Scheme values.

The AndroidManifest.xml file should look like this:

<manifest xmlns:android=""

    <uses-permission android:name="android.permission.INTERNET" />


        <activity android:name="com.auth0.samples.MainActivity">
              <action android:name="android.intent.action.MAIN" />
              <category android:name="android.intent.category.LAUNCHER" />



There are many options to customize the authentication with the WebAuthProvider builder. You can read about them in the Auth0 SDK for Android documentation.

Mobile example screenshot

Previous Tutorial
1. Getting started
Use Auth0 for FREECreate free Account