Configure Platform Authentication via Auth0

This document describes how to set up an app under your Auth0 account that Flowgear will use to authenticate users signing in to the Console. When configured, users that do not exist within your Auth0 account will not be able to sign in. Note that permissions for users are still managed within Flowgear.

Follow these steps to provide the required information to Flowgear when setting up your account.

Steps

Create an Auth0 account.
Once a Tenant has been created, navigate to the Auth0 Dashboard. Create an Application of type Regular Web Applications (Applications → Create Application).
Update the Application URIs Settings:
- Set the Application Login URI to https://app.flowgear.net/r/signin.
- Set the Allowed Callback URLs to https://app.flowgear.net.
- Set the Allowed Logout URLs to https://app.flowgear.net.
- Set the Allowed Web Origins to https://*.flowgear.net.
Ensure the following grant types are set in Advanced Settings:
- Implicit
- Authorization Code
- Refresh Token
- Client Credentials
Ensure Application Authentication Method is set to Client Secret (Post).
Create a new connection. If using a free account, a Database Connection can be set up. Navigate to Authentication → Database Connections → Create Database Connection. Ensure Email Address is set as one of the user identifier attributes.
Add users as needed by navigating to User Management → Users → Create User.
In the previously created Application, navigate to the Connections tab and ensure Username-Password Authentication Connection is enabled.
Provide the following details to Flowgear Support. This requires a restart in order to be applied:
- The Auth0 Instance URL which is the base URL for the Auth0 Tenant. Can be found in the Application → Advanced → Endpoints section.
- The Client ID and Client Secret (found in the Settings for the created Application), so that Auth0 can be configured for your Tenant.

Configure Platform Authentication via Auth0

Steps

See also

Read more