Enterprise Identity Providers

Learn about enterprise identity providers supported by Auth0.

Auth0 supports enterprise login for both web-based and native applications. Enterprise login is a method of authentication that allows users to log in to an application using existing credentials from an enterprise identity provider, such as Google Workspace or Microsoft Azure Active Directory (Entra ID). This is separate from connecting and authorizing applications for an external provider so they can access external APIs on the user’s behalf. To learn more, read User authentication vs Connected Accounts.

Auth0 supports the following enterprise providers out of the box:

• Active Directory/LDAP
• ADFS
• Azure Active Directory Native
• Google Workspace
• OpenID Connect
• Okta
• PingFederate
• SAML
• Azure Active Directory

Auth0’s B2B and Enterprise plans allow unlimited Okta Enterprise Connections. To learn more, see Auth0’s Pricing Page.

You can also explore partner-supported enterprise connections on the Auth0 Marketplace.

OpenID Connect (OIDC) protocol

Enterprise connections using OpenID Connect or Okta Workforce as the identity provider can support the following:

• Proof Key for Code Exchange (PKCE)

  • For more information on PKCE, review Protecting Apps with PKCE.

• Attribute claims and access token mapping

• UserInfo integration

You can currently implement these features for OpenID Connect or Okta Workforce connections. To learn more, review Configure PKCE and Claim Mapping for OIDC Connections.