Optionalchange_Optionalguardian_Optionaldefault_Optionaldefault_Name of connection used for password grants at the /tokenendpoint. The following connection types are supported: LDAP, AD, Database Connections, Passwordless, Windows Azure Active Directory, ADFS.
Optionalerror_Optionaldevice_Optionaldefault_OptionalflagsOptionalfriendly_Friendly name for this tenant.
Optionalpicture_URL of logo to be shown for this tenant (recommended size: 150x150)
Optionalsupport_End-user support email address.
Optionalsupport_End-user support URL.
Optionalallowed_URLs that are valid to redirect to after logout from Auth0.
Optionalsession_Number of hours a session will stay valid.
Optionalidle_Number of hours for which a session can be inactive before the user must log in again.
Optionalephemeral_Number of hours an ephemeral (non-persistent) session will stay valid.
Optionalidle_Number of hours for which an ephemeral (non-persistent) session can be inactive before the user must log in again.
Optionalsandbox_Selected sandbox version for the extensibility environment.
Optionallegacy_Selected sandbox version for rules and hooks extensibility.
Optionalsandbox_Available sandbox versions for the extensibility environment.
Optionaldefault_The default absolute redirection uri, must be https
Optionalenabled_Supported locales for the user interface.
Optionalaccess_Optionalsecurity_Optionalsession_OptionalsessionsOptionaloidc_Optionalallow_Whether to accept an organization name instead of an ID on auth endpoints
Optionalcustomize_Whether to enable flexible factors for MFA in the PostLogin action
Optionalacr_Supported ACR values
OptionalmtlsOptionalpushed_Enables the use of Pushed Authorization Requests
Optionalauthorization_Supports iss parameter in authorization responses
Optionaldpop_Enables strict DPoP refresh token binding per RFC 9449: all refresh tokens issued to public clients that present a DPoP proof are bound to the sender's key, and the binding is validated on every subsequent exchange. When disabled, DPoP refresh token binding may still apply for specific audiences for backwards compatibility.
Optionalskip_Controls whether a confirmation prompt is shown during login flows when the redirect URI uses non-verifiable callback URIs (for example, a custom URI schema such as myapp://, or localhost).
If set to true, a confirmation prompt will not be shown. We recommend that this is set to false for improved protection from malicious apps.
See https://auth0.com/docs/secure/security-guidance/measures-against-app-impersonation for more information.
Optionalresource_Optionalclient_Whether the authorization server supports retrieving client metadata from a client_id URL.
Optionalclient_Whether the authorization server supports registering clients dynamically from a client_id URL. Requires client_id_metadata_document_supported to be enabled.
Optionalphone_Whether Phone Consolidated Experience is enabled for this tenant.
Optionalenable_Whether Auth0 Guide (AI-powered assistance) is enabled for this tenant.
Optionalinclude_Whether session metadata is included in specific tenant logs (slo, oidc_backchannel_logout_failed, oidc_backchannel_logout_succeeded).
Optionaldynamic_Optionalcountry_
Default audience for API authorization.