OptionalnameThe name of the client. Must contain at least one character. Does not allow '<' or '>'.
OptionaldescriptionFree text description of the purpose of the Client. (Max character length: 140)
Optionalclient_The secret used to sign tokens for the client
Optionallogo_The URL of the client logo (recommended size: 150x150)
OptionalcallbacksA set of URLs that are valid to call back from Auth0 when authenticating users
Optionaloidc_Optionaloidc_Optionalsession_Optionalallowed_A set of URLs that represents valid origins for CORS
Optionalweb_A set of URLs that represents valid web origins for use with web message response mode
Optionalgrant_A set of grant types that the client is authorized to use. Can include authorization_code, implicit, refresh_token, client_credentials, password, http://auth0.com/oauth/grant-type/password-realm, http://auth0.com/oauth/grant-type/mfa-oob, http://auth0.com/oauth/grant-type/mfa-otp, http://auth0.com/oauth/grant-type/mfa-recovery-code, urn:openid:params:grant-type:ciba, urn:ietf:params:oauth:grant-type:device_code, and urn:auth0:params:oauth:grant-type:token-exchange:federated-connection-access-token.
Optionalclient_List of audiences for SAML protocol
Optionalallowed_Ids of clients that will be allowed to perform delegation requests. Clients that will be allowed to make delegation request. By default, all your clients will be allowed. This field allows you to specify specific clients
Optionalallowed_URLs that are valid to redirect to after logout from Auth0.
Optionaljwt_Optionalencryption_Optionalssotrue to use Auth0 instead of the IdP to do Single Sign On, false otherwise (default: false)
Optionalcross_true if this client can be used to make cross-origin authentication requests, false otherwise if cross origin is disabled
Optionalcross_URL for the location in your site where the cross origin verification takes place for the cross-origin auth flow when performing Auth in your own domain instead of Auth0 hosted login page.
Optionalsso_true to disable Single Sign On, false otherwise (default: false)
Optionalcustom_true if the custom login page is to be used, false otherwise.
Optionaltoken_Optionalapp_Optionalis_Whether this client a first party client or not
Optionaloidc_Whether this client will conform to strict OIDC specifications
Optionalcustom_The content (HTML, CSS, JS) of the custom login page
Optionalcustom_Optionaltoken_Optionalform_Form template for WS-Federation protocol
OptionaladdonsOptionalclient_OptionalmobileOptionalinitiate_Initiate login uri, must be https
Optionalnative_Optionalrefresh_Optionaldefault_Optionalorganization_Optionalorganization_Optionalorganization_Defines the available methods for organization discovery during the pre_login_prompt. Users can discover their organization either by email, organization_name or both.
Optionalclient_Optionalrequire_Makes the use of Pushed Authorization Requests mandatory for this client
Optionalrequire_Makes the use of Proof-of-Possession mandatory for this client
Optionalsigned_Optionalcompliance_Optionalpar_Specifies how long, in seconds, a Pushed Authorization Request URI remains valid
Optionalmy_
Example