Overview

Configure Maverics to use Auth0 as an identity provider using the OpenID Connect (OIDC) protocol.

Identity Fabric→Auth0 (OIDC)→Configure Identity Fabric→Use for authentication in a user flow

Configure Identity Fabric

Use a Secret Provider
Production settings ought to implement a secret management system. Maverics connects with multiple secret management systems, which keep secrets that Orchestrator instances retrieve during startup. To cite a secret from your provider, enclose the name in angle brackets. (e.g. <app client-id>)
Learn more about Secret Providers

ld Name	Description	Example
Name	The friendly name of your provider.	auth0-example
OIDC Well Known URL	The URL that returns OpenID Connect metadata about the Auth0 authorization server.	`https://yourtenant.us.auth0.com/.well-known/openid-configuration`
OAuth Client ID	The client ID of the registered Mavericks application.	exampleID <client_ID_from_secret_provider>
OAuth Client Secret	The secret key used for authentication in production environments.
Redirect URL	The URL that Auth0 uses to redirect the client back after authentication.	`https://host1.example.com/oidc`
Logout Callback URL (Auth0)	The URL that initiates the logout on Auth0's side. This invalidates the SSO cookie in Auth0 but the cookie may still remain in the browser.	`https://yourtenant.us.auth0.com/v2/logout`
Logout Callback URL (Maverics)	The URL that Auth0 calls back once logout is successful. This needs to be set in the registered Mavericks application.	`https://host1.example.com/logout`
Proof Key for Code Exchange (PKCE)	Enable or disable Proof Key for Code Exchange (PKCE). When set to `enabled`, PKCE enhances security by requiring a code verifier during authentication. When `disabled`, PKCE is disabled, which may reduce security for public clients.

{{snippet.Identity Service Health Monito}}