# Auth0

{% hint style="info" %}
This feature is available in the **Premium plan and higher**.
{% endhint %}

{% hint style="danger" %}
**Remember to grant your users access permissions to GoodAccess. Users without them won't be able to log in.**
{% endhint %}

## Step 1 - Adding a new identity provider

[Log in to the GoodAccess **Control Panel**, and go to **Settings** > **SSO & Identity**.](https://app.goodaccess.com/sso-and-identity/)

Click **+ Add provider**, enter the **Provider name**, choose your **Identity Provider**, and click **Continue**.

## Step 2 - Setting up Single Sign-On with SAML

Log in to the [Auth0 Admin console](https://manage.auth0.com/), go to **Applications** > **Applications**, and click **+ Create Application**.

Give the application a name, select **Native**, and click **Create**.

Go to **Addons**, and open **SAML2**.

<figure><img src="https://418253935-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FiJ406Lpi9EKoWDi7GFL7%2Fuploads%2FRo5u73ND5zHq9MetfNNk%2FFeatures_SSO_Auth0_01.png?alt=media&#x26;token=aadfc324-c145-4d0a-b6db-3cdaa04edc05" alt="Auth0 Admin console with key steps to creating a new application."><figcaption><p>Creating a new application</p></figcaption></figure>

<figure><img src="https://418253935-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FiJ406Lpi9EKoWDi7GFL7%2Fuploads%2FbrTlDxQKr4B1hM6WIrCx%2FFeatures_SSO_Auth0_02.png?alt=media&#x26;token=f386d610-9cd7-46cc-b9c2-6e078c62efc4" alt="Auth0 Admin console with key steps to creating a new application."><figcaption><p>Creating a new application</p></figcaption></figure>

<figure><img src="https://418253935-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FiJ406Lpi9EKoWDi7GFL7%2Fuploads%2FnSdWwo2T3tOLeQKj0Bkr%2FFeatures_SSO_Auth0_03.png?alt=media&#x26;token=811af064-25f2-4dd0-9f8d-e1d39efc3052" alt="Auth0 Admin console with key steps to opening the SAML2 addon."><figcaption><p>Opening the SAML2 addon</p></figcaption></figure>

### 1. Settings

Go to **Settings**, and copy the details from GoodAccess - **(2) GoodAccess links**.

* **Application Callback URL** - Assertion Consumer Service URL

Copy the below code into **Settings**:

```
{
  "mappings": {
    "email": "email",
    "name": "name"
  },
  "createUpnClaim": false,
  "passthroughClaimsWithNoMapping": false,
  "mapUnknownClaimsAsIs": false,
  "mapIdentities": true
}
```

Return to GoodAccess, and click **Continue**.

Return to Auth0, scroll down to the bottom of the page, and click **Enable**.

<figure><img src="https://418253935-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FiJ406Lpi9EKoWDi7GFL7%2Fuploads%2FzKEEmWc1HnnyQg1ZPF80%2FFeatures_SSO_Auth0_04.png?alt=media&#x26;token=ac5cfdfa-95cb-47b6-a02b-2251c5db3d83" alt="Auth0 Admin console with key steps to setting up the &#x22;Settings&#x22;."><figcaption><p>Setting up the Settings</p></figcaption></figure>

### 2. Usage

Go to **Usage**, download the **Identity Provider Metadata**, and open the file in a text editor (e.g. Notepad).

Copy the details to GoodAccess - **(3) Identity Provider links**, and click **Continue**.

* **Sign in URL** - Identity Provider Login URL
* **Entity ID** - Issuer
* **X509 signing certificate** - Copy the certificate from the text editor

Click **Submit** to finish the configuration.

<figure><img src="https://418253935-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FiJ406Lpi9EKoWDi7GFL7%2Fuploads%2Ftw93KaYRd56g9ZMqHqJx%2FFeatures_SSO_Auth0_05.png?alt=media&#x26;token=650798ff-e875-4dfa-a391-ae0990d3d839" alt="Auth0 Admin console with key steps to setting up the &#x22;Usage&#x22;."><figcaption><p>Setting up the Usage</p></figcaption></figure>

<figure><img src="https://418253935-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FiJ406Lpi9EKoWDi7GFL7%2Fuploads%2F4TRUGF5rIFkvEZDAUZXb%2FFeatures_SSO_Auth0_06.png?alt=media&#x26;token=8781d1ca-a2d9-453c-85d1-4db69d632ac5" alt="Notepad with highlighted X509 signin certificate."><figcaption><p>Copying the certificate from the Notepad</p></figcaption></figure>

You have now successfully set up your Auth0 SSO with GoodAccess.