Table: auth0_tenant_settings - Query Auth0 Tenant Settings using SQL

Auth0 is a flexible, drop-in solution to add authentication and authorization services to your applications. Your software can use Auth0 to authenticate and authorize users with a wide variety of identity providers, including social, enterprise, and username/password databases. Tenant settings in Auth0 provide configuration details and settings for each tenant, including enabled features, default settings, and customization options.

Table Usage Guide

The auth0_tenant_settings table provides insights into tenant settings within Auth0. As a security analyst or an application developer, explore tenant-specific details through this table, including enabled features, default settings, and other customization options. Utilize it to uncover information about each tenant's configuration, such as settings related to user registration, login, and identity providers.

Examples

SSO settings

Analyze the settings to understand if Single Sign-On (SSO) is enabled and if changes to these settings are permitted, helping to ensure secure access management.

select
  flags ->> 'enable_sso' as enable_sso,
  flags ->> 'allow_changing_enable_sso' as allow_changing_enable_sso
from
  auth0_tenant_settings;

select
  json_extract(flags, '$.enable_sso') as enable_sso,
  json_extract(flags, '$.allow_changing_enable_sso') as allow_changing_enable_sso
from
  auth0_tenant_settings;

Enabled locales

Explore which locales have been enabled in your Auth0 tenant settings. This can help in understanding the geographical distribution of your user base.

select
  l as enabled_locales
from
  auth0_tenant_settings t,
  jsonb_array_elements(t.enabled_locales) l;

select
  l.value as enabled_locales
from
  auth0_tenant_settings t,
  json_each(t.enabled_locales) l;

Session and idle session lifetime settings

Analyze the settings to understand the duration of active and idle sessions within your Auth0 tenant. This can help optimize user experience by managing session lengths and idle times.

select
  session_lifetime,
  idle_session_lifetime
from
  auth0_tenant_settings;

select
  session_lifetime,
  idle_session_lifetime
from
  auth0_tenant_settings;

Schema for auth0_tenant_settings

Name	Type	Description
_ctx	jsonb	Steampipe context in JSON form, e.g. connection_name.
allowed_logout_urls	jsonb	A set of URLs that are valid to redirect to after logout from Auth0.
change_password	jsonb	Change password page settings.
default_audience	text	Default audience for API Authorization.
default_directory	text	Name of the connection that will be used for password grants at the token endpoint.
default_redirection_uri	text	The default absolute redirection uri, must be https and cannot contain a fragment.
device_flow	jsonb	Settings for device flow.
enabled_locales	jsonb	Supported locales for the UI.
error_page	jsonb	Settings for the error page.
flags	jsonb	Tenant flags.
friendly_name	text	The friendly name of the tenant.
guardian_mfa_page	jsonb	Guardian MFA page settings.
idle_session_lifetime	double precision	Force a user to login after they have been inactive for the specified number (hours).
picture_url	text	The URL of the tenant logo.
sandbox_version	text	The selected sandbox version to be used for the extensibility environment.
sandbox_versions_available	jsonb	A set of available sandbox versions for the extensibility environment.
session_cookie	jsonb	Session cookie settings.
session_lifetime	double precision	Login session lifetime, how long the session will stay valid (hours).
support_email	text	User support email.
support_url	text	User support URL.
universal_login	jsonb	Used to store additional metadata.

Export

This table is available as a standalone Exporter CLI. Steampipe exporters are stand-alone binaries that allow you to extract data using Steampipe plugins without a database.

You can download the tarball for your platform from the Releases page, but it is simplest to install them with the steampipe_export_installer.sh script:

/bin/sh -c "$(curl -fsSL https://steampipe.io/install/export.sh)" -- auth0

You can pass the configuration to the command with the --config argument:

steampipe_export_auth0 --config '<your_config>' auth0_tenant_settings