Integrating Auth0

Capabilities

DataGrail's Auth0 integration provides the following capabilities:

Product	Capability
Request Manager	Request Types Access, Deletion Identifier Categories Email
Live Data Map	System Detection

Before You Start

To successfully configure this integration, please ensure you have sufficient privileges:

• DataGrail User Role: Super Admin, Connections Manager
• Auth0 User Role: Admin

Create an Auth0 App

1. Log in to Auth0.
2. In the left menu, select Applications.
3. Select Create Application.
4. Enter a name for the application and select Machine-to-Machine Applications.
5. Select Create.
6. When prompted to choose an API to authorize, select Auth0 Management API. If this option is not available, please contact Auth0 to ensure the Management API is enabled for your account.
7. Select the required scopes for the DataGrail integration:

Required Scopes

• read:clients
• read:client_grants
• read:client_keys
• read:connections
• read:email_provider
• read:logs
• read:logs_users
• read:resource_servers
• read:users
• read:users_app_metadata
• delete:users

8. Select Authorize.
9. Navigate to the Settings menu on the newly created app.
10. Copy the Client ID, Client Secret, and Subdomain (the text before .auth0.com under Domain). Store these credentials in a secure, temporary location.
11. Enter https://datagrail.io/oauth/auth0 in the Allowed Callback URLs section and select Save Changes.

Connect to DataGrail

1. In DataGrail, navigate to Integrations and select Configure New Integration to search for Auth0.
2. Enter the Subdomain, Client ID, and Client Secret.
3. Select Configure Integration.

Next Steps

Now that you've successfully connected the integration, check out the following resources:

• Access Request Lifecycle
• Deletion Request Lifecycle
• Request Manager Overview
• Customizing Intake Forms

Troubleshooting

If you are unable to successfully connect the integration, review these common troubleshooting steps:

Ensure Required Permissions Are Granted on API Keys/Resources

DataGrail checks required permissions and scopes on API keys/resources used by each integration. If all necessary permissions are not granted, new connections will fail.

Review Required Account Types and User Roles

If users do not have the necessary permissions or the minimum required user role in the connecting system, the connection to DataGrail will fail. Additionally, connections will fail if your account type does not match the one required by the integration.

See Before You Start to review these requirements.

Technical Details

The Auth0 integration uses the Auth0 Management API:

Access Type	Synchronous
Deletion Type	Synchronous

API Documentation

Learn more about this API implementation and DataGrail functionality in our API Integration Documentation.