Auth0

Auth0 Logo

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊

Back to Solutions Index


Attribute Value
Publisher Microsoft Corporation
Support Tier Microsoft
Support Link https://support.microsoft.com
Categories domains
Version 3.1.5
Author Microsoft - support@microsoft.com
First Published 2022-08-18
Last Updated 2026-03-27
Solution Folder Auth0
Marketplace Azure Marketplace · Popularity: 🟢 High (82%)

The Auth0 Access Management solution for Microsoft Sentinel provides the capability to ingest Auth0 log events into your Microsoft Sentinel workspace.

Underlying Microsoft Technologies used:

This solution takes a dependency on the following technologies, and some of these dependencies either may be in Preview state or might result in additional ingestion or operational costs:

a. Azure Monitor HTTP Data Collector API

b. Azure Functions

Contents

Data Connectors

This solution provides 2 data connector(s):

🔶 CLv1: This connector ingests into a table that uses the legacy Custom Log V1 schema format with type-suffixed column names (e.g. _s, _d, _b, _t, _g). Note: identification is based on column name suffixes which are also permitted in CLv2, so this classification may not always be accurate.

Tables Used

This solution uses 2 table(s):

Table Used By Connectors Used By Content
Auth0AM_CL 🔶 [DEPRECATED] Auth0 Logs (using Azure Function) -
Auth0Logs_CL Auth0 Logs (via Codeless Connector Framework) -

🔶 CLv1: This table uses the legacy Custom Log V1 schema format with type-suffixed column names (e.g. _s, _d, _b, _t, _g). Note: identification is based on column name suffixes which are also permitted in CLv2, so this classification may not always be accurate.

Content Items

This solution includes 2 content item(s):

Content Type Count
Parsers 2

Parsers

Name Description Tables Used
Auth0 - Auth0AM_CL (read)
Auth0_CL (read)
Auth0AM - Auth0AM_CL (read)
Auth0Logs_CL (read)

Additional Documentation

📄 Source: Auth0/README.md

Steps to Configure Auth0 app

The following are steps to be followed in Auth0 App.

  1. Please go to applications and select application from auth0 side, Please find below screen shot for reference :-

  1. Click on settings of the App and note down the credentials
    a. Copy the domain b. Get the client id value c. Get the client secret

  2. Under Application properties --> Select Application type as Machine to Machine. Please find below screen shot for reference :-

  1. Under credentials tab --> Select client secret (Post). Please find below screen shot for reference :-

  1. Under API tab, please make sure Authorized to scopes, Please find below screen shot for reference :-

  1. Please make sure the domain value under settings --> Environment Variables, please refer below screen shot for reference and other values are entered from the above step copied values and Domain should be starts with https://,then click on Apply and restart function app

Release Notes

Version Date Modified (DD-MM-YYYY) Change History
3.1.5 13-04-2026 Deprecate Auth0 Logs (using Azure Function)
3.1.4 30-03-2026 Fix space in name, Rename to Auth0 Logs (via Codeless Connector Framework)
3.1.3 20-03-2026 Rename to Auth0 Logs(via Codeless Connector Framework)
3.1.2 10-02-2025 Advancing CCP Data Connector from Public preview to Global Availability.
3.1.1 22-01-2025 Added Preview tag to CCP Data Connector
3.1.0 13-12-2024 Added new CCP Data Connector to the Solution
3.0.0 24-08-2024 Updated the Data Connector Function app python runtime version to 3.11
11-12-2023 Added new Parser (Auth0AM)

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊

Back to Solutions Index