Auth0 SSO Setup (OIDC)

This guide walks you through configuring Auth0 as your identity provider for Ledly using OpenID Connect (OIDC).

Prerequisites

• Auth0 account with Admin or Application Admin permissions
• Auth0 tenant (domain)
• Ledly organization administrator access
• Ledly Enterprise plan ($1,999/mo)

Configuration Values

You’ll need this Ledly value when configuring Auth0:

Step 1: Create Auth0 Application

Step 2: Configure Application Settings

Step 3: Configure Connections

Ensure your Auth0 application has the appropriate identity connections enabled:

Step 4: Configure Ledly

Now configure Ledly to use your Auth0 application:

Step 5: Test SSO

Configuration Reference

OIDC Endpoints

Auth0 uses standard OIDC discovery. Endpoints are derived from your domain:

Requested Scopes

Ledly requests the following OIDC scopes:

Token Lifetimes

Default Auth0 token lifetimes (configurable in Auth0):

Advanced Configuration

Custom Domains

If you’re using a custom domain in Auth0 (e.g., auth.yourcompany.com instead of your-tenant.auth0.com):

1. Configure custom domain in Auth0 Dashboard → Branding → Custom Domains
2. Use the custom domain in Ledly’s SSO configuration

Rules and Actions

You can use Auth0 Rules or Actions to:

• Add custom claims to tokens
• Enforce additional authentication requirements
• Log authentication events
• Integrate with other services

Example Action to add department to token:

exports.onExecutePostLogin = async (event, api) => {
  const namespace = 'https://ledly.io';
  api.idToken.setCustomClaim(`${namespace}/department`, event.user.user_metadata.department);
};

Multi-factor Authentication

Enable MFA in Auth0 for additional security:

1. Go to Security → Multi-factor Auth
2. Enable desired MFA factors (Push, SMS, TOTP)
3. Configure policies

MFA enforcement in Auth0 will apply to all Ledly SSO logins.

Branding

Customize the Auth0 login page to match your organization:

1. Go to Branding → Universal Login
2. Customize colors, logo, and text
3. Enable the new Universal Login experience for a modern look

Troubleshooting

”Invalid Client” Error

Possible causes:

• Client ID was not copied correctly
• Application was deleted

Solutions:

1. Verify the Client ID in Auth0 matches Ledly configuration
2. Check that the application still exists in Auth0

”Invalid Client Secret” Error

Possible causes:

• Client Secret was not copied correctly
• Client Secret was rotated

Solutions:

1. In Auth0, go to your application settings
2. Copy the current Client Secret
3. Update it in Ledly SSO settings

”Callback URL Mismatch” Error

Possible causes:

• Allowed Callback URL doesn’t match exactly

Solution: Verify the Allowed Callback URL in Auth0 is exactly:

https://ledlyv2-production.up.railway.app/api/sso/auth0/callback

Check for:

• Trailing slashes
• HTTP vs HTTPS
• Typos

”Invalid Domain” Error

Possible causes:

• Domain format is incorrect
• Tenant doesn’t exist

Solutions:

1. Verify the domain format (should be your-tenant.auth0.com or custom domain)
2. Don’t include https:// in the domain field
3. Check that your Auth0 tenant is active

”Connection Not Enabled” Error

Possible causes:

• The user’s identity connection isn’t enabled for the application

Solution:

1. Go to your Auth0 application → Connections tab
2. Enable the appropriate connection for how the user is trying to authenticate

”User Not Found” Error

Possible causes:

• JIT provisioning is disabled in Ledly
• User doesn’t exist in Auth0

Solutions:

1. Enable “Auto-provision users” in Ledly SSO settings
2. Verify the user exists in Auth0 → User Management → Users

Revoking SSO Access

Remove Individual User Access

In Auth0:

1. Go to User Management → Users
2. Find the user
3. Click on the user → Actions → Block or Delete

Revoke Application Access

To prevent all users from using Ledly via Auth0:

1. Go to Applications → Applications
2. Find your Ledly application
3. Toggle off the application or delete it

Disable SSO in Ledly

1. Go to Settings → SSO
2. Toggle off the SSO configuration or select “None” as provider

Migrating from Another IdP

If you’re migrating from another identity provider to Auth0:

Support

If you need help with Auth0 SSO setup:

• Ledly Support: [email protected]
• Auth0 Documentation: auth0.com/docs

When contacting support, include:

• Your Ledly organization ID
• Your Auth0 tenant domain (not the client secret)
• Any error messages displayed
• Screenshots of your Auth0 configuration (redact secrets)