Lets you rotate Auth0 credentials for security or when changing environments (from development to production) without depending on support
Lets you update only the Client ID or the Domain without having to enter the Client Secret again
Lets you turn Auth0 login off and on again for the whole organization
Avoids interruptions for users: updating the credentials does not end sessions that are already active
Navigation: Configuración → Integraciones, and scroll down to the SSO con Auth0 card, at the bottom of the screen.
If Auth0 SSO is already set up, the card button says Actualizar credenciales. If you have not set it up yet, it says Configurar and the step-by-step is in the article "How to get your Auth0 credentials to set up SSO".
Click Actualizar credenciales. The dialog opens with the Client ID and the Domain already filled in, the Client Secret field empty, and the Habilitar SSO con Auth0 switch.
Replace the Client ID, the Client Secret and/or the Domain with the new values.
If you only want to change the Client ID or the Domain and keep the same Client Secret, leave the Client Secret field empty. The field's help text says that in this case the current secret is kept.
Save the changes.
For security, the saved Client Secret is never shown on screen: the field always appears empty, even if you already have one set up.
Updating the credentials does not end sessions that are already active. Login keeps working normally, now using the new credentials.
It turns Auth0 login on and off for the whole organization:
On: people at your company can log in with their corporate credentials.
Off: the credentials stay saved, but nobody can log in through SSO. Use it to suspend SSO access without losing the setup.
Turning it off does not require entering the Client Secret again: just turn the switch off and save.
Saving the changes does not check the credentials against Auth0. The green notice "Auth0 login is already set up for this account" means the data was saved, not that it is correct.
After rotating a credential, log in with SSO to confirm the change worked. If the new value has an error, the failure shows up on the first login attempt, and it is better if that attempt is yours, not someone else's in the organization.
What happens if I leave the Client Secret field empty when updating?
The Client Secret you already had saved is kept. It is useful if you only need to change the Client ID or the Domain.
Why does the Client Secret field always appear empty, even if one is already set up?
It is a security behavior: the saved value is never shown on screen.
Are users' sessions ended when the credentials are updated?
No. Active sessions are kept, and login switches to the new credentials without interruptions.
Do I need to enter the Client Secret to turn off Auth0 SSO?
No, turning the switch off does not require entering the Client Secret again.
Can I update the credentials even if I moved from a development environment to a production one?
Yes, this is exactly the main use case: support no longer has to delete the setup manually to move to a new environment.
Have feedback or want to request improvements? Let us know at roadmap.whalemate.com/roadmap
If you have not set up Auth0 SSO yet, first read "How to get your Auth0 credentials to set up SSO"
