Auth0

This article gives the steps to configure Auth0 as the identity provider for NocoDB.

NocoDB, Retrieve SAML SSO Configuration details

1. Go to Account Settings.
2. Select Authentication (SSO).
3. Click the New Provider button.
4. In the dialog, type a Display name for the provider. The login page shows the provider with this name.
5. Copy the Redirect URL & Audience / Entity ID. You need these values later to configure the identity provider.

Auth0, Configure NocoDB as an Application

1. Sign in to your Auth0 account.

   • Go to Applications > Create Application.

2. In the Create Application dialog:

   • Select Regular Web Application.
   • Click Create.

3. When the application is created, the Quick Start screen opens.

   • Go to the Addons tab.
   • Enable SAML2 Web App.

4. In the SAML2 Web App dialog:

   • In the Application Callback URL field, paste the Redirect URL that you copied above.
   • In Settings, keep nameIdentifierProbes as ["http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress"]. Remove all other probes.

   {
     "nameIdentifierProbes": [
       "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress"
     ]
   }

   • Click Enable to save the settings.

5. On the Settings tab:

   • Go to the Advanced Settings > Endpoints > SAML section.
   • Copy the SAML Metadata URL.

NocoDB, Configure Auth0 as an Identity Provider

1. Go to Account Settings > Authentication > SAML.
2. Enter the Metadata URL from the step above. You can also configure the XML directly.
3. Click Save.

Users now see the Sign in with <SSO> option on the sign-in page.

Availability

• SAML SSO is available on NocoDB Cloud (Business plan and above) and on licensed self-hosted deployments (Business plan and above). For access, reach out to sales team.
• On the Business plan, the SSO configuration menu is in the workspace sidebar, at Settings > Single Sign-On (SSO). For more details, refer here.
• Domain Verification Required for Cloud Plans: Verify your domain in NocoDB before you configure SAML SSO. Cloud Business and Enterprise plans both need this. Only users with email addresses from verified domains can sign in with SSO. For details, see Domain Verification.