Client Secret Is Not Visible After Configuration in Auth0 Self-Service SSO
Last Updated:
Overview
In Auth0 Self-Service Single Sign-On (SSO), Auth0 hides the client secret after the initial configuration for security purposes. To allow an end user to set a new client secret, the Auth0 tenant administrator must generate a new Self-Service SSO ticket. End users observe this behavior when attempting to view or retrieve the client secret for an existing Self-Service SSO connection in the configuration portal.
Applies To
- Auth0
- Self-Service Enterprise Configuration (Self-Service SSO)
- Client Secret
Cause
For security purposes, Auth0 hides the client secret and prevents end users from retrieving or viewing the value once Auth0 saves the configuration during the initial setup.
Solution
How is a new client secret set for an existing Self-Service SSO connection?
Since Auth0 prevents viewing the existing client secret, the Auth0 tenant administrator must generate a new Self-Service SSO ticket. The administrator provides the end user with the new ticket URL, allowing them to access the configuration portal and enter a new client secret. Generate a new Self-Service SSO ticket via the Auth0 Dashboard or the Management Application Programming Interface (API), provide the URL to the end user, and instruct them to configure the new client secret.
- Generate a new Self-Service SSO ticket via the Auth0 Dashboard or Management API.
- Provide the new ticket URL to the end user.
- Instruct the end user to access the URL and configure the new client secret.
