Auth0 OIDC SSO is a paid feature. If you’re using Infisical Cloud, then it is available under the Pro Tier. If you’re self-hosting Infisical, then you should contact sales@infisical.com to purchase an enterprise license to use it.

1

Setup application in Auth0

1.1. From the Application’s Page, navigate to the settings tab of the Auth0 application you want to integrate with Infisical. OIDC auth0 list of applications

1.2. In the Application URIs section, set the Application Login URI and Allowed Web Origins fields to https://app.infisical.com and the Allowed Callback URL field to https://app.infisical.com/api/v1/sso/oidc/callback. OIDC auth0 create application uris OIDC auth0 create application origin

If you’re self-hosting Infisical, then you will want to replace https://app.infisical.com with your own domain.

Once done, click Save Changes.

1.3. Proceed to the Connections Tab and enable desired connections. OIDC auth0 application connections

2

Retrieve Identity Provider (IdP) Information from Auth0

2.1. From the application settings page, retrieve the Client ID and Client Secret OIDC auth0 application credential

2.2. In the advanced settings (bottom-most section), retrieve the OpenID Configuration URL from the Endpoints tab. OIDC auth0 application oidc url

Keep these values handy as we will need them in the next steps.

3

Finish configuring OIDC in Infisical

3.1. Back in Infisical, in the Organization settings > Security > OIDC, click Manage. OIDC auth0 manage org Infisical

3.2. For configuration type, select Discovery URL. Then, set Discovery Document URL, Client ID, and Client Secret from step 2.1 and 2.2. OIDC auth0 paste values into Infisical

Once you’ve done that, press Update to complete the required configuration.

4

Enable OIDC in Infisical

Enabling OIDC allows members in your organization to log into Infisical via Auth0.

OIDC auth0 enable OIDC

If you’re configuring OIDC SSO on a self-hosted instance of Infisical, make sure to set the AUTH_SECRET and SITE_URL environment variable for it to work: - AUTH_SECRET: A secret key used for signing and verifying JWT. This can be a random 32-byte base64 string generated with openssl rand -base64 32. - SITE_URL: The URL of your self-hosted instance of Infisical - should be an absolute URL including the protocol (e.g. https://app.infisical.com)

Was this page helpful?

Keycloak OIDCGeneral OIDC