Skip to content

Page permalink

Always use the following permalink when referencing this page. It will remain unchanged in future help versions.

https://docs.sophos.com/fusion/customer/help/en-us/index.html?contextId=xdr-integration-auth0-setup

Integrate Auth0

You can integrate Auth0 with Sophos XDR so that it sends data to Sophos for analysis.

Key steps

The key steps in an Auth0 integration are as follows:

  • Create an application in Auth0 and define permissions.
  • Get credentials from Auth0.
  • Configure the integration in Sophos XDR.

Requirements

The following is required for Auth0 configuration:

  • Access to the Auth0 dashboard.

Add an Auth0 integration

To integrate Auth0, you must first create an application with the correct permisssions, then gather the API details to provide in Sophos XDR.

Create an application and define permissions

To get the Auth0 API details you need for integration, do as follows:

  1. Sign in to the Auth0 Dashboard and go to Application > Applications.
  2. In the Applications section, click + Create Application.
  3. In the pop-up, name the application and choose the application type Machine to Machine Applications.
  4. Click Create.
  5. In the Authorize Machine to Machine Application pop-up, select Auth0 Management API.

  6. Select the checkboxes for the following permissions:

    • read:users
    • read:logs
    • read:logs_users

  7. Click Authorize.

Next, you obtain the API credentials for the application.

Get API credentials from Auth0

To get the API credentials from Auth0, do as follows:

  1. Go to the Settings tab in the new application.

  2. Note the following items for use in Sophos XDR:

    • Domain (typically in the form https://company.eu.auth0.com)
    • Client ID
    • Client

Next, you configure an integration in Sophos XDR.

Configure the integration in Sophos XDR

To integrate Auth0 with Sophos XDR, do as follows:

  1. In Sophos Fusion, go to Security Operations > Integrations > Marketplace.

  2. Click Auth0.

    The Auth0 page opens. You can configure integrations here and see a list of any you've already configured.

  3. In Configured integrations, click Add new.

  4. In Add an integration, do as follows:

    1. Enter a name for the integration.
    2. For the Base URL, enter the Domain you got from Auth0.
    3. Enter the Client ID you got from Auth0.
    4. For the Client Secret, enter the Client you got from Auth0.

  5. Click Done.

The new integration appears under Configured integrations. If its status icon is a green tick, your data should appear in the Sophos Data Lake after validation.

Additional resources

For more information on configuring Auth0, see the following documents: