Auth0 Tables

The Auth0 integration includes the following tables and permissions

Tables

Auth0Actions

NameTypeDescription
AllChangesDeployedbooleanTrue if all of an Action's contents have been deployed.
BuiltAttimestampThe time when this action was built successfully.
CodestringThe source code of the action.
CreatedAttimestampThe time when this action was created.
DependenciesstringList of third party npm modules, and their versions, hat this action depends on.
DeployedVersionstringVersion of the action that is currently deployed.
ActionIDstringA unique ID for the action.
NamestringThe name of the action.
RuntimestringThe Node runtime. For example node16, defaults to node12.
SecretsstringList of secrets that are included in an action or a version of an action.
StatusstringThe build status of this action.
SupportedTriggersstringList of triggers that this action supports. At this time, an action can only target a single trigger at a time.
UpdatedAttimestampThe time when this action was updated.
ConfigIDintThe ID of the configuration within Compyl.
BatchDatedatetimeThe sync date.

Auth0Clients

NameTypeDescription
ClientIDstringID of this client.
TenantstringName of the tenant this client belongs to.
NamestringName of this client (min length: 1 character, does not allow < or >).
DescriptionstringFree string description of this client (max length: 140 characters).
GlobalstringWhether this is your global 'All Applications' client representing legacy tenant settings (true) or a regular client (false).
AppTypestringType of client used to determine which settings are applicable. Can be spa, native, non_interactive, or regular_web.
IsFirstPartybooleanWhether this client a first party client (true) or not (false).
OIDCConformantbooleanWhether this client conforms to strict OIDC specifications (true) or uses legacy features (false).
CallBacksstringComma-separated list of URLs whitelisted for Auth0 to use as a callback to the client after authentication.
AllowedOriginsstringComma-separated list of URLs allowed to make requests from JavaScript to Auth0 API (typically used with CORS). By default, all your callback URLs will be allowed. This field allows you to enter other origins if necessary. You can also use wildcards at the subdomain level (e.g., https://*.contoso.com). Query strings and hash information are not taken into account when validating these URLs.
WebOriginsstringComma-separated list of allowed origins for use with Cross-Origin Authentication, Device Flow, and web message response mode.
ClientAliasesstringList of audiences/realms for SAML protocol. Used by the WS-Fed addon.
AllowedClientsstringList of allow clients and API ids that are allowed to make delegation requests. Empty means all all your clients are allowed.
AllowedLogoutUrlsstringComma-separated list of URLs that are valid to redirect to after logout from Auth0. Wildcards are allowed for subdomains.
GrantTypesstringList of grant types supported for this application. Can include authorization_code, implicit, refresh_token, client_credentials, password, http://auth0.com/oauth/grant-type/password-realm, http://auth0.com/oauth/grant-type/mfa-oob, http://auth0.com/oauth/grant-type/mfa-otp, http://auth0.com/oauth/grant-type/mfa-recovery-code, and urn:ietf:params:oauth:grant-type:device_code.
SSObooleanApplies only to SSO clients and determines whether Auth0 will handle Single Sign On (true) or whether the Identity Provider will (false).
SSODisabledbooleanWhether Single Sign On is disabled (true) or enabled (true). Defaults to true.
CrossOriginAuthenticationbooleanWhether this client can be used to make cross-origin authentication requests (true) or it is not allowed to make such requests (false).
CrossOriginLOCstring

URL of the location in your site where the cross origin verification takes place for the cross-origin auth flow when performing Auth in your own domain instead of Auth0 hosted login page.

Format:url

CustomLoginPageOnbooleanWhether a custom login page is to be used (true) or the default provided login page (false).
CustomLoginPagestringThe content (HTML, CSS, JS) of the custom login page.
CustomLoginPagePreviewstringThe content (HTML, CSS, JS) of the custom login page. (Used on Previews)
TokenEndpointAuthMethodstring

Defines the requested authentication method for the token endpoint. Can be none (public client without a client secret), client_secret_post (client uses HTTP POST parameters), or client_secret_basic (client uses HTTP Basic).

Possible values: none, client_secret_post, client_secret_basic

InitiateLoginURIstring

Initiate login uri, must be https

Format: absolute-https-uri-or-empty

OrganizationUsagestring

Defines how to proceed during an authentication transaction with regards an organization. Can be deny (default), allow or require.

Possible values: deny, allow, require

OrganizationRequireBehaviorstring

Defines how to proceed during an authentication transaction when `client.organization_usage: require'.

Possible values: n_prompt, pre_login_prompt, post_login_prompt

RequirePushedAuthorizationRequestsbooleanMakes the use of Pushed Authorization Requests mandatory for this client
RequireProofOfPossessionstringMakes the use of Proof-of-Possession mandatory for this client
ComplianceLevelstring

Defines the compliance level for this client, which may restrict its capabilities

Possible values: none, fapi1_adv_pkj_par, fapi1_adv_mtls_par, null

ConfigIDintThe ID of the configuration within Compyl.
BatchDatedatetimeThe sync date.

Auth0Connections

NameTypeDescription
DisplayNamestringConnection name used in login screen.
NamestringThe name of the connection
ConnectionIDstringThe connection's identifier.
StrategystringThe type of the connection, related to the identity provider.
RealmsstringDefines the realms for which the connection will be used (ie: email domains). If the array is empty or the property is not specified, the connection name will be added as realm.
IsDomainConnectionbooleanTrue if the connection is domain level.
ConfigIDintThe ID of the configuration within Compyl.
BatchDatedatetimeThe sync date.

Auth0DeviceCredentials

NameTypeDescription
DeviceCredentialsIdstringID of this device.
DeviceNamestringUser agent for this device.
DeviceIdstringUnique identifier for the device. NOTE: This field is generally not populated for refresh_tokens and rotating_refresh_tokens.
Typestring

Type of credential.

Possible values: public_key, refresh_token, rotating_refresh_token

UserIdstringuser_id this credential is associated with.
ClientIdstringclient_id of the client (application) this credential is for.
ConfigIDintThe ID of the configuration within Compyl.
BatchDatedatetimeThe sync date.

Auth0Hooks

NameTypeDescription
HookIdstringID of this hook.
NamestringName of this hook.
ScriptstringCode to be executed when this hook runs.
TriggerIdstringTrigger ID
ConfigIDintThe ID of the configuration within Compyl.
BatchDatedatetimeThe sync date.

Auth0Log

NameTypeDescription
LogIdstringUnique ID of the event.
DatedatetimeDate when the event occurred in ISO 8601 format.
TypestringType of event.
ConnectionstringName of the connection the event relates to.
ConnectionIdstringID of the connection the event relates to.
ClientIdstringID of the client (application).
ClientNamestringName of the client (application).
IpstringIP address of the log event source.
UserAgentstringUser agent string from the client device that caused the event.
ElapsedTimeintElapsed time.
SessionIdstringIdentifier for the session.
LoginsCountintNumber of logins.
HostnamestringHostname the event applies to.
UserIdstringID of the user involved in the event.
UserNamestringName of the user involved in the event.
StrategystringName of the strategy involved in the event.
StrategyTypestringType of strategy involved in the event.
IsMobilebooleanWhether the client was a mobile device (true) or desktop/laptop/server (false).
CountryCodestringTwo-letter Alpha-2 ISO 3166-1 country code.
CountryCode3stringThree-letter Alpha-3 ISO 3166-1 country code.
CountryNamestringFull country name in English.
CityNamestringFull city name in English.
LatitudefloatGlobal latitude (horizontal) position.
LongitudefloatGlobal longitude (vertical) position.
TimeZonestringTime zone name as found in the tz database.
ContinentCodestringContinent the country is located within. Can be AF (Africa), AN (Antarctica), AS (Asia), EU (Europe), NA (North America), OC (Oceania) or SA (South America).
ConfigIDintThe ID of the configuration within Compyl.
BatchDatedatetimeThe sync date.
CompletedAtdatetimeThe time when the log entry was completed at.
InitiatedAtdatetimeThe time when the log entry was initiated at.

Auth0Organizations

NameTypeDescription
OrgIDstringOrganization identifier.
NamestringThe name of this organization.
DisplayNamestringFriendly name of this organization.
ConfigIDintThe ID of the configuration within Compyl.
BatchDatedatetimeThe sync date.

Auth0Permission

NameTypeDescription
ConfigIDintThe ID of the configuration within Compyl.
PermissionIdintIdentifier for the permission.
PermissionNamestringName of this permission.
DescriptionstringDescription of this permission.
ResourceServerIdentifierstringResource server (API) identifier that this permission is for.
ResourceServerNamestringResource server (API) name this permission is for.
BatchDatedatetimeThe sync date.

Auth0Role

NameTypeDescription
RoleIdstringID for this role.
NamevarcharName of this role.
DescriptionvarcharDescription of this role.
BatchDatedatetimeThe sync date.
ConfigIdintThe ID of the configuration within Compyl.

Auth0Rules

NameTypeDescription
ConfigIDintThe ID of the configuration within Compyl.
NamestringName of this rule.
EnabledbooleanWhether the rule is enabled (true), or disabled (false).
OrderintOrder that this rule should execute in relative to other rules. Lower-valued rules execute first.
ScriptstringCode to be executed when this rule runs.
StagestringExecution stage of this rule. Can be login_success, login_failure, or pre_authorize.
BatchDatedatetimeThe sync date.
RuleIDstringThe ID of the rule.

Auth0Users

NameTypeDescription
UserIDstringID of the user which can be used when interacting with other APIs.
EmailvarcharEmail address of this user.
UpdatedAtdatetimeDate and time when this user was last updated/modified (ISO_8601 format).
ConnectvarcharName of the connection containing this identity.
ProvidervarcharThe type of identity provider
IsSocialbooleanWhether this identity is from a social provider (true) or not (false).
NamevarcharName of this user.
NickNamevarcharPreferred nickname or alias of this user.
CreatedAtdatetimeDate and time when this user was created (ISO_8601 format).
LastLogindatetimeLast date and time this user logged in (ISO_8601 format).
LastIpvarcharLast IP address from which this user logged in.
LoginsCountintTotal number of logins this user has performed.
BatchDatedatetimeThe sync date.
ConfigIdintThe ID of the configuration within Compyl.
IsMFAEnabledbooleanWhether this user has multi-factor authentication enabled on their account.
MFAProvidersstringList of multi-factor authentication providers with which this user has enrolled.

Bridge Tables

Auth0Permissions_Auth0Roles

NameTypeDescription
PermissionIdintIdentifier for the permission granted by the role.
RoleIdstringIdentifier for the role.
ConfigIDintThe ID of the configuration within Compyl.

Auth0Roles_Auth0Users

NameTypeDescription
RoleIdstringIdentifier for the role.
UserIdstringIdentifier for the user.
ConfigIDintThe ID of the configuration within Compyl.

Permissions

NamePermissions
Auth0DeviceCredentialsread:device_credentials
Auth0Organizationsread:organizations read:organizations_summary
Auth0Hooksread:hooks
Auth0Clientsread:clients, read:client_keys, read:client_credentials, read:client_summary
Auth0Connectionsread:connections
Auth0Actionsread:actions
Auth0Usersread:users, read:user_idp_tokens
Auth0Logsread:logs, read:logs_users
Auth0Rulesread:rules
Auth0Rolesread:roles
Auth0Permissionsread:roles

Did this page help you?