Auth0
Identity evidence from your Auth0 tenant. Prerequisites, setup steps and troubleshooting.
What it does
Auth0 supplies the customer and workforce identity picture: users, connections, MFA enforcement and tenant log events behind your authentication controls.
Prerequisites
- A cSquare GRC workspace where you are an owner or admin.
- Connection method: API key or token.
- Access needed at Auth0: Read-only Management API scopes.
Set up
Open Settings > Integrations in the app, find Auth0, then:
- In the Auth0 dashboard create a Machine to Machine application authorized for the Management API.
- Grant it the read-only scopes: read:users, read:connections, read:logs, read:clients.
- Paste the tenant domain, client ID and client secret here.
Verify the connection
- Back in Settings > Integrations, Auth0 should show Connected with a recent sync time.
- Open Evidence and filter by source Auth0. The first sync can take a few minutes.
- Open a control that depends on Auth0 and confirm the new evidence is linked.
AI prompts
Paste these into Fibo in the app, or into any assistant connected through MCP.
I just connected Auth0 to cSquare GRC. Check that it is syncing, list the evidence it has collected so far, and tell me which controls in my active programs now have evidence from Auth0.
Which controls in my programs could be covered by Auth0 evidence but still have no current evidence? Group them by framework and suggest what to collect.
Troubleshooting
access_denied on the token request
The application is not authorized for the Management API audience. Authorize it under APIs, then re-run Test connection.
Insufficient scope
One of the read scopes is missing. Add read:users, read:connections and read:logs, then reconnect.
Test connection fails immediately
Nine times out of ten the credential was pasted with a trailing space, or it was issued in a different tenant or region. Re-copy it and try again.
The connector is quarantined
Collection paused after three consecutive failures. Fix the credential, then use Re-test and re-enable on the Active connections tab; it only resumes when the test passes.
Connected, but no evidence appears
Check that at least one collection type is selected and that the account can see the resources. Read-only accounts scoped to a single project will only return that project.
Still stuck?
My Auth0 connector in cSquare GRC is failing. Here is the error I see: <paste error>. Walk me through the likely causes and the exact fix, step by step.