Connect Auth0 to Black Cat SSPM
Connect your Auth0 tenant so Black Cat can review users, multi-factor enforcement, roles, applications, connections and tenant session settings.
≈ 10 min · audit access · no write-capable permission
What Black Cat reads, and why
| Permission | What it lets Black Cat do | Status |
|---|---|---|
read:users | Lets Black Cat list users, their multi-factor enrolment and last login. | Required |
read:roles | Lets Black Cat list the roles defined in your tenant and the privileges they carry. | Required |
read:role_members | Lets Black Cat see which users hold each role. | Required |
read:clients | Lets Black Cat review applications, their grant types and callback URLs. | Required |
read:connections | Lets Black Cat list the identity connections your tenant accepts. | Required |
read:connections_options | Lets Black Cat review each connection's password policy and brute-force protection. | Required |
read:tenant_settings | Lets Black Cat review tenant-wide settings such as session lifetime and dynamic client registration. | Required |
read:logs | Lets Black Cat review recent tenant activity for administrative changes and audit coverage. | Required |
read:guardian_factors | Lets Black Cat see which multi-factor methods are enabled for the tenant. | Required |
read:mfa_policies | Lets Black Cat see whether multi-factor authentication is required of every user. | Required |
What you'll need
- Auth0 tenant domain Required — Your tenant address, for example acme.eu.auth0.com.
- Machine-to-machine client ID Required — Shown on the read-only application you create for Black Cat in the Auth0 dashboard.
- Client secret Required — Issued with the client ID on the same read-only Auth0 application.