Update Override Tenant Setting for Non-Verifiable Callback URI Confirmation via Auth0 Management API

Updating the Override tenant setting visible on an application's settings tab on the Auth0 Dashboard for the Non-Verifiable Callback Uniform Resource Identifier (URI) End-User Confirmation option using the Auth0 Management API requires passing a specific attribute in the payload. When attempting to disable this confirmation prompt at the application level to prevent user consent screens in mobile apps, the tenant-level settings apply when the application lacks the override. Passing the skip_non_verifiable_callback_uri_confirmation_prompt attribute in the Management API call enables the override and sets the desired confirmation behavior.

• Auth0
• Auth0 Management API
• Mobile Applications

How does the Auth0 Management API update the override tenant setting?

The Auth0 Management API does not use an explicit attribute named "override tenant setting". Instead, the presence of the skip_non_verifiable_callback_uri_confirmation_prompt attribute in the client configuration dictates whether the application overrides the tenant setting.

Configure the application-level override and confirmation prompt behavior by passing the appropriate boolean value or removing the attribute entirely when updating the client.

1. To enable the override and disable the confirmation prompt, set the skip_non_verifiable_callback_uri_confirmation_prompt attribute to true in the client update payload.
2. To enable the override and enforce the confirmation prompt, set the skip_non_verifiable_callback_uri_confirmation_prompt attribute to false in the client update payload.
3. To disable the override and revert to the tenant-level setting, remove the skip_non_verifiable_callback_uri_confirmation_prompt attribute from the client configuration entirely.

NOTE: The Auth0 dashboard restricts editing the non-verifiable callback URI end-user confirmation option unless the application enables the override tenant setting. The Auth0 Management API Get a client endpoint only returns the skip_non_verifiable_callback_uri_confirmation_prompt attribute if the application currently enables the override.