Auth0

Auth0 Connections API

The connections API from Auth0 — 15 operation(s) for connections.

GitHub OpenAPI
Business capability
Identity & Access Management BC-620.20

Operations 28

Each operation below carries the questions people ask an LLM about it and the instructions they give an agent to run it. Generated by API Evangelist overlay

GET /connections List identity connections in the tenant · Get All Connections #
Ask an LLM
“Which identity provider connections are set up in my Auth0 tenant?”
“Can I list only the connections that use a particular strategy, like SAML or Google?”
Tell an agent
List all connections in my tenant.
List the connections using the {strategy} strategy.
POST /connections Create an identity connection · Create a Connection #
Ask an LLM
“How do I add a new database or social login connection?”
“Can I enable a new connection for specific applications when I create it?”
Tell an agent
Create a connection named {name} using the {strategy} strategy.
Create connection {name} with strategy {strategy} enabled for clients {enabled_clients}.
GET /connections/{id} Get a connection's configuration · Get a Connection #
Ask an LLM
“What options and identity provider settings does a specific connection have?”
“Can I see a single connection's full configuration by its ID?”
Tell an agent
Get connection {id}.
Show the options of connection {id}, including only fields {fields}.
DELETE /connections/{id} Delete a connection · Delete a Connection #
Ask an LLM
“What happens to users when I delete a connection?”
“Is deleting a connection reversible?”
Tell an agent destructive · confirm first
Delete connection {id}.
Permanently remove connection {id} so nobody can log in through it.
PATCH /connections/{id} Update a connection's settings · Update a Connection #
Ask an LLM
“Does updating a connection's options replace the whole options object?”
“How do I change the display name of an existing connection?”
Tell an agent
Change the display name of connection {id} to {display_name}.
Replace the options of connection {id} with {options}.
GET /connections/{id}/clients List applications that use a connection · Get Enabled Clients for a Connection #
Ask an LLM
“Which applications have a given connection enabled?”
“How does paging work when listing the clients enabled on a connection?”
Tell an agent
List the clients that have connection {id} enabled.
Show the next {take} applications using connection {id}.
PATCH /connections/{id}/clients Change which applications use a connection · Update Enabled Clients for a Connection #
Ask an LLM
“Can I enable or disable a connection for several applications at once?”
“What's the way to update a connection's list of enabled clients?”
Tell an agent
Update the enabled clients for connection {id}.
Change which applications can use connection {id}.
GET /connections/{id}/directory-provisioning Get a connection's directory provisioning setup · Get a Directory Provisioning Configuration #
Ask an LLM
“How is directory provisioning configured for one connection?”
“Is automatic directory synchronization turned on for this connection?”
Tell an agent
Get the directory provisioning configuration of connection {id}.
Show whether connection {id} synchronizes its directory automatically.
DELETE /connections/{id}/directory-provisioning Remove directory provisioning from a connection · Delete a Directory Provisioning Configuration #
Ask an LLM
“How do I turn off directory provisioning for a connection entirely?”
“Can I delete a connection's directory provisioning setup without deleting the connection?”
Tell an agent destructive · confirm first
Delete the directory provisioning configuration of connection {id}.
Stop directory provisioning on connection {id}.
PATCH /connections/{id}/directory-provisioning Update a connection's directory provisioning · Patch a Directory Provisioning Configuration #
Ask an LLM
“How do I change the attribute mapping used by directory provisioning?”
“Can I switch off automatic synchronization but keep provisioning configured?”
Tell an agent
Update the directory provisioning mapping of connection {id} to {mapping}.
Set automatic directory sync on connection {id} to {synchronize_automatically}.
POST /connections/{id}/directory-provisioning Set up directory provisioning for a connection · Create a Directory Provisioning Configuration #
Ask an LLM
“How do I turn on directory provisioning for an enterprise connection?”
“Can I sync groups as well as users when I set up directory provisioning?”
Tell an agent
Create a directory provisioning configuration for connection {id}.
Set up directory provisioning on connection {id} with group sync {synchronize_groups}.
GET /connections/{id}/directory-provisioning/default-mapping Get default directory provisioning attribute mapping · Get a Connection's Default Directory Provisioning Attribute Mapping #
Ask an LLM
“What attribute mapping does directory provisioning use by default for a connection?”
“Where can I see the out-of-the-box directory sync attribute map?”
Tell an agent
Get the default directory provisioning mapping for connection {id}.
Show the default directory sync attributes for connection {id}.
POST /connections/{id}/directory-provisioning/synchronizations Trigger an on-demand directory sync · Request an On-demand Synchronization of the Directory #
Ask an LLM
“Can I force a directory sync right now instead of waiting for the schedule?”
“How do I request an immediate directory synchronization for a connection?”
Tell an agent
Run a directory synchronization now for connection {id}.
Request an on-demand directory sync on connection {id}.
GET /connections/{id}/directory-provisioning/synchronized-groups List groups selected for directory sync · Get Synchronized Groups for a Directory Provisioning Configuration #
Ask an LLM
“Which directory groups are selected for synchronization on a connection?”
“Can I page through the synchronized groups of a provisioning setup?”
Tell an agent
List the synchronized groups for connection {id}.
Show the next {take} groups selected for sync on connection {id}.
PUT /connections/{id}/directory-provisioning/synchronized-groups Replace the groups selected for directory sync · Create or Replace Synchronized Group Selections for a Directory Provisioning… #
Ask an LLM
“How do I choose which directory groups get synchronized?”
“Does setting synchronized groups replace the previous selection?”
Tell an agent
Set the synchronized groups for connection {id} to {groups}.
Replace the directory sync group selection on connection {id} with {groups}.
GET /connections/{id}/keys Get signing keys for an Okta or OIDC connection · Get Connection Keys #
Ask an LLM
“What keys does an Okta or OIDC connection currently use?”
“Can I view the Private Key JWT keys of an OIDC connection?”
Tell an agent
Get the connection keys for connection {id}.
Show the current signing keys of OIDC connection {id}.
POST /connections/{id}/keys Provision initial keys for an OIDC connection · Create Connection Keys #
Ask an LLM
“How do I create keys before switching an OIDC connection to Private Key JWT?”
“Can I choose the signing algorithm for initial connection keys?”
Tell an agent
Create initial connection keys for connection {id}.
Provision keys for connection {id} using signing algorithm {signing_alg}.
POST /connections/{id}/keys/rotate Rotate an Okta or OIDC connection's keys · Rotate Connection Keys #
Ask an LLM
“How do I rotate the keys on an Okta connection?”
“Can I change the signing algorithm while rotating connection keys?”
Tell an agent
Rotate the keys for connection {id}.
Rotate connection {id}'s keys to signing algorithm {signing_alg}.
GET /connections/{id}/scim-configuration Get a connection's SCIM configuration · Get a Connection's SCIM Configuration #
Ask an LLM
“How is SCIM inbound provisioning configured for a connection?”
“Which user attribute does a connection's SCIM setup use as the user ID?”
Tell an agent
Get the SCIM configuration for connection {id}.
Show the SCIM mapping currently set on connection {id}.
DELETE /connections/{id}/scim-configuration Remove a connection's SCIM configuration · Delete a Connection's SCIM Configuration #
Ask an LLM
“How do I turn off SCIM provisioning for a connection?”
“Can I delete just the SCIM setup and keep the connection?”
Tell an agent destructive · confirm first
Delete the SCIM configuration of connection {id}.
Disable SCIM provisioning on connection {id}.
PATCH /connections/{id}/scim-configuration Update a connection's SCIM mapping · Patch a Connection's SCIM Configuration #
Ask an LLM
“How do I change the SCIM attribute mapping on a connection?”
“Must I send both the user ID attribute and the mapping when updating SCIM?”
Tell an agent
Update connection {id}'s SCIM config to user ID attribute {user_id_attribute} and mapping {mapping}.
Change the SCIM mapping on connection {id} to {mapping}, keeping {user_id_attribute} as the ID.
POST /connections/{id}/scim-configuration Enable SCIM provisioning on a connection · Create a SCIM Configuration #
Ask an LLM
“How do I enable SCIM provisioning for an enterprise connection?”
“Can I supply a custom attribute mapping when creating a SCIM configuration?”
Tell an agent
Create a SCIM configuration for connection {id}.
Set up SCIM on connection {id} using {user_id_attribute} as the user ID attribute.
GET /connections/{id}/scim-configuration/default-mapping Get the default SCIM attribute mapping · Get a Connection's Default SCIM Mapping #
Ask an LLM
“What is the default SCIM attribute mapping for a connection?”
“Can I see the SCIM mapping a connection would use before I customize it?”
Tell an agent
Get the default SCIM mapping for connection {id}.
Show connection {id}'s out-of-the-box SCIM attribute map.
GET /connections/{id}/scim-configuration/tokens List a connection's SCIM tokens · Get a Connection's SCIM Tokens #
Ask an LLM
“Which SCIM tokens have been issued for a connection?”
“When do the SCIM bearer tokens on a connection expire?”
Tell an agent
List the SCIM tokens for connection {id}.
Show all SCIM client tokens issued on connection {id}.
POST /connections/{id}/scim-configuration/tokens Create a SCIM token for a connection · Create a SCIM Token #
Ask an LLM
“How do I generate a bearer token for my SCIM client?”
“Can I set a lifetime and scopes on a new SCIM token?”
Tell an agent
Create a SCIM token for connection {id}.
Issue a SCIM token on connection {id} with scopes {scopes} lasting {token_lifetime} seconds.
DELETE /connections/{id}/scim-configuration/tokens/{tokenId} Revoke a connection's SCIM token · Delete a Connection's SCIM Token #
Ask an LLM
“How do I revoke a leaked SCIM token?”
“Can I delete one SCIM token without affecting others on the connection?”
Tell an agent destructive · confirm first
Delete SCIM token {tokenId} from connection {id}.
Revoke the SCIM token {tokenId} on connection {id}.
GET /connections/{id}/status Check if an AD/LDAP connection is online · Check Connection Status #
Ask an LLM
“Is my AD/LDAP connector online right now?”
“What does a 404 from the connection status check mean?”
Tell an agent
Check the status of connection {id}.
Tell me whether LDAP connection {id} is online.
DELETE /connections/{id}/users Delete a database connection user by email · Delete a Connection User #
Ask an LLM
“How do I delete a user from a database connection by their email address?”
“Can I wipe all users from a connection at once?”
Tell an agent destructive · confirm first
Delete the user {email} from connection {id}.
Remove {email} from database connection {id}.

Documentation

📖
Documentation
https://auth0.com/docs/api/management/v2
📖
APIReference
https://auth0.com/docs/api/management/v2
📖
GettingStarted
https://auth0.com/docs/get-started
📖
Authentication
https://auth0.com/docs/secure/tokens
📖
Documentation
https://auth0.com/docs/api/authentication
📖
APIReference
https://auth0.com/docs/api/authentication
📖
Documentation
https://docs.fga.dev

Specifications

⚙
OpenAPI
https://raw.githubusercontent.com/api-evangelist/auth0/refs/heads/main/openapi/auth0-connections-api-openapi.yml
⚙
AsyncAPI
https://raw.githubusercontent.com/api-evangelist/auth0/refs/heads/main/asyncapi/auth0-log-streams-and-actions-asyncapi.yml

Other Resources

🔗
OpenAPISource
https://auth0.com/docs/api/management/openapi.json
🔗
SpectralRules
https://raw.githubusercontent.com/api-evangelist/auth0/refs/heads/main/rules/auth0-management-rules.yml
🔗
SpectralRules
https://raw.githubusercontent.com/api-evangelist/auth0/refs/heads/main/rules/auth0-authentication-rules.yml
🔗
SpectralRules
https://raw.githubusercontent.com/api-evangelist/auth0/refs/heads/main/rules/auth0-fga-rules.yml
🔗
Project
https://openfga.dev
🔗
Repository
https://github.com/openfga/openfga

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This API 
curl "https://apis.io/api/v1/apis/auth0:auth0-connections-api"
All apis 
curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

auth0-connections-api-openapi.yml Raw ↑ 
openapi: 3.2.0
info:
  title: Auth0 Management Connections API
  description: Auth0 Management API v2.
  termsOfService: https://auth0.com/web-terms/
  contact:
    name: Auth0 Support
    url: https://support.auth0.com
  version: '2.0'
servers:
- url: https://{tenantDomain}/api/v2
  variables:
    tenantDomain:
      default: '{TENANT}.auth0.com'
      description: Auth0 Tenant Domain
security:
- bearerAuth: []
tags:


# --- truncated at 32 KB (137 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/auth0/refs/heads/main/openapi/auth0-connections-api-openapi.yml