It lets you connect Whalemate to your organization's identity system through SSO
It centralizes login: users sign in with their corporate credentials without creating a new account
It avoids managing users by hand inside the platform
It enables access control from Auth0, including security policies and MFA
Login with Auth0 connects people who already exist in Whalemate: it does not create users. Everyone who will sign in through SSO has to be loaded in the platform with the same email they use in Auth0. If you need hires and departures to arrive on their own, payroll provisioning handles that, and it has its own article.
Navigation: manage.auth0.com → Applications → Applications → [tu aplicación] → Settings
Go to manage.auth0.com and select your organization's tenant from the top left corner.
In the side menu, click Applications → Applications.
If an application for Whalemate already exists, select it and skip to point 5: you can reuse it, as long as the URLs in point 6 are set. If it doesn't exist, click Create Application:
Name: e.g. Whalemate SSO
Type: Regular Web Application
Click Create
Inside the application, open the Settings tab.
In the Basic Information section, copy these three values. You will paste them into Whalemate in step 2:
Client ID
Client Secret
Domain (format: tu-tenant.auth0.com)
The Client Secret is sensitive. Don't share it or expose it publicly.
On the same tab, scroll down to Application URIs and fill in these three fields with the exact values shown here. Auth0 uses these URLs to send the user back after login: if they are missing, the authentication flow fails and the person can't sign in.
Allowed Callback URLs: https://back.whalemate.com/auth0/oidc/callback
Allowed Logout URLs: https://back.whalemate.com
Allowed Web Origins: https://back.whalemate.com
Click Save Changes.
Go to Configuración → Integraciones and scroll down to the SSO con Auth0 card, at the bottom of the screen.
Click Configurar. The dialog opens with the three fields and a switch.
Paste the Client ID, the Client Secret and the Dominio you copied in the previous step. All three are required the first time.
Turn on the switch «Habilitar SSO con Auth0». This is what turns login on: it comes off, and with the switch off the credentials are saved but nobody can sign in through SSO.
Click Configurar to save.
Saving does not check the credentials against Auth0. The green notice «El inicio de sesión con Auth0 ya está configurado para esta cuenta» means the three values were saved, not that they are correct. The real test is to sign in with SSO: try it yourself before telling the rest of the organization, so a badly copied value doesn't show up on someone else's first attempt.
If you later need to replace a credential, the button on the card changes to Actualizar credenciales and the details are in the article «Actualizar las credenciales de Auth0 SSO».
I saved the credentials and login with Auth0 doesn't work.
Check two things, in this order. First, that the Habilitar SSO con Auth0 switch is on: it is what turns login on, and it comes off. Second, that the three values are the ones from your Auth0 application and that the three URLs from step 1 are saved in Application URIs; remember that the green notice does not check the credentials.
Does SSO create users in Whalemate?
No. The person has to exist in the platform with the same email they use in Auth0; if not, the login fails and goes back to the login screen. Payroll provisioning is what syncs hires and departures on their own.
What if I don't have admin permissions in Auth0?
You need admin permissions on your organization's Auth0 tenant to create applications and get to the credentials. Contact your IT lead or the tenant administrator.
Where do I find the Domain if I have several tenants?
The Domain belongs to the tenant you selected when you signed in to Auth0 (top left corner). Each tenant has its own domain.
What type of application should I create in Auth0?
It must be Regular Web Application. Other types are not compatible with Whalemate's SSO flow.
Have feedback or want to request improvements? Tell us at roadmap.whalemate.com/roadmap
Already set up SSO and need to rotate your credentials? See the document on Actualizar las credenciales de Auth0 SSO
