Optional
nameThe name of the client. Must contain at least one character. Does not allow '<' or '>'.
Optional
descriptionFree text description of the purpose of the Client. (Max character length: 140
)
Optional
client_The secret used to sign tokens for the client
Optional
logo_The URL of the client logo (recommended size: 150x150)
Optional
callbacksA set of URLs that are valid to call back from Auth0 when authenticating users
Optional
oidc_Optional
oidc_Optional
session_Optional
allowed_A set of URLs that represents valid origins for CORS
Optional
web_A set of URLs that represents valid web origins for use with web message response mode
Optional
grant_A set of grant types that the client is authorized to use. Can include authorization_code
, implicit
, refresh_token
, client_credentials
, password
, http://auth0.com/oauth/grant-type/password-realm
, http://auth0.com/oauth/grant-type/mfa-oob
, http://auth0.com/oauth/grant-type/mfa-otp
, http://auth0.com/oauth/grant-type/mfa-recovery-code
, urn:openid:params:grant-type:ciba
, urn:ietf:params:oauth:grant-type:device_code
, and urn:auth0:params:oauth:grant-type:token-exchange:federated-connection-access-token
.
Optional
client_List of audiences for SAML protocol
Optional
allowed_Ids of clients that will be allowed to perform delegation requests. Clients that will be allowed to make delegation request. By default, all your clients will be allowed. This field allows you to specify specific clients
Optional
allowed_URLs that are valid to redirect to after logout from Auth0.
Optional
jwt_Optional
encryption_Optional
ssotrue
to use Auth0 instead of the IdP to do Single Sign On, false
otherwise (default: false
)
Optional
cross_true
if this client can be used to make cross-origin authentication requests, false
otherwise if cross origin is disabled
Optional
cross_URL for the location in your site where the cross origin verification takes place for the cross-origin auth flow when performing Auth in your own domain instead of Auth0 hosted login page.
Optional
sso_true
to disable Single Sign On, false
otherwise (default: false
)
Optional
custom_true
if the custom login page is to be used, false
otherwise.
Optional
token_Optional
app_Optional
is_Whether this client a first party client or not
Optional
oidc_Whether this client will conform to strict OIDC specifications
Optional
custom_The content (HTML, CSS, JS) of the custom login page
Optional
custom_Optional
token_Optional
form_Form template for WS-Federation protocol
Optional
addonsOptional
client_Optional
mobileOptional
initiate_Initiate login uri, must be https
Optional
native_Optional
refresh_Optional
default_Optional
organization_Optional
organization_Optional
organization_Defines the available methods for organization discovery during the pre_login_prompt
. Users can discover their organization either by email
, organization_name
or both.
Optional
client_Optional
require_Makes the use of Pushed Authorization Requests mandatory for this client
Optional
require_Makes the use of Proof-of-Possession mandatory for this client
Optional
signed_Optional
compliance_Optional
par_Specifies how long, in seconds, a Pushed Authorization Request URI remains valid
Optional
my_
Example