Auth0

This page gives the steps to configure Auth0 as the Identity service provider for NocoDB.

Go to Account Settings.
Select Authentication (SSO).
Click the New Provider button. A popup modal opens.
In the popup modal, specify a Display name for the provider. The login page shows the provider with this name.
Copy the Redirect URL. You configure it later in the Identity Provider.

OIDC SSO Configuration

Open your Auth0 account.
- Go to Applications > Create Application.
In the Create Application modal:
- Select Regular Web Application.
- Click Create.
On the Quick start screen, go to the Settings tab.
- Copy the Client ID and Client Secret from the Basic Information section.
Go to the Application URIs section.
- Below Allowed Callback URLs, add the Redirect URL that you copied in step(2).
- Click Save Changes.
On the Settings tab, go to the Advanced Settings section. Click the Endpoints tab.
- Copy the OAuth Authorization URL, OAuth Token URL, OAuth User Info URL and JSON Web Key Set URL.

In NocoDB, open Account Settings > Authentication > OIDC. The "Register OIDC Identity Provider" modal opens. Enter this information:

NocoDB field	Value
`Client ID`	The `Client ID` from step (5) above
`Client Secret`	The `Client Secret` from step (5) above
`Authorization URL`	The `OAuth Authorization URL` from step (7) above
`Token URL`	The `OAuth Token URL` from step (7) above
`Userinfo URL`	The `OAuth User Info URL` from step (7) above
`JWK Set URL`	The `JSON Web Key Set URL` from step (7) above
`Scope`	`openid` `profile` `email` `offline_access`
Username Attribute	The name of the claim that holds the email of the user. The default value is "email."

The sign-in page now shows the Sign in with <SSO> option to users.

SAML SSO Configuration

Post sign-out, refresh page (for the first time) if you do not see Sign in with SSO option

For information about Auth0 API Scopes, refer here.

For more common questions and troubleshooting, see our SSO FAQ.

Availability

OIDC SSO is available on NocoDB Cloud (Business plan and above) and on licensed self-hosted deployments (Business plan and above). For access, reach out to sales team.
For users on the Business plan, the SSO configuration menu is in the workspace sidebar, at Settings > Single Sign-On (SSO). For more information, refer here.
Domain Verification Required for Cloud Plans: Before you configure OIDC SSO, you must verify your domain in NocoDB. This is necessary for both Business and Enterprise plans in the cloud. Only users with email addresses from verified domains can sign in through SSO. For more information, refer to Domain Verification.