Auth0 - OIDC

In order to use Auth0 as an IdP to authenticate the Akeyless Vault via OIDC, you need to follow the below steps.

Create an Auth0 application

1. In your Auth0 account, go to Applications > Applications > Create Application.

2. For Application Type choose Native and click Create.

3. On the Settings tab, under the Application URIs section, set https://auth.akeyless.io/oidc/callback on the Allowed Callback URLs.

4. Once the OIDC app has been created, you need to obtain the Client ID, Client Secret, and Auth0 domain:

5. In order to bind the Auth0 application with your Akeyless Vault account, you need to create an OIDC Authentication Method using either Akeyless CLI or UI, as described below.

Create OIDC Authentication Method - CLI

akeyless create-auth-method-oidc --name 'My Auth0 app' --issuer https://{your-auth0-domain}.auth0.com} --client-id {your-client-id}  --client-secret {your-client-secret} --unique-identifier {your-unique-identifier (e.g 'email' or 'username'')}

Login with OIDC - CLI

1. You should configure a new profile with your Access-ID from the previous step and OIDC type (In case profile name is not provided the default profile will be configured):

akeyless configure --access-id <your-access-id> --access-type oidc --profile 'auth0-app'

2. Now, you can run any Akeyless CLI command and be authenticated with Auth0 application:

akeyless list-items --profile auth0-app