Auth0
Manage your Auth0 Organizations from Dex - members, invitations, enabled connections, roles, and password-reset tickets, scoped per organization.
Dex connects to the Auth0 Management API to run your Auth0 Organizations conversationally - list members, invite users by email, manage enabled connections and member roles, and issue password-change tickets. One Machine-to-Machine application covers the whole tenant, and each Dex tenant is confined to a single Auth0 Organization (org_...). Available as an MSP global app: one shared Management API credential, with per-tenant scoping by organization_id so each customer sees only its own organization. Employees can request a password-reset link for their own account in this organization through Dex Go.
What Dex does with Auth0
Dex handles both admin workflows and employee self-service — all policy-guardrailed and audit-logged.
For admins (Dex Pro)
- List and read the members of this Auth0 Organization
- Invite users to the organization by email, and list or revoke pending invitations
- List enabled connections on the organization, and read member role assignments
- Remove members, revoke invitations, disable connections, and revoke member roles
- Create a password-change ticket for a member of this organization
- From the MSP master connection: list, create, update, and delete organizations, add members, attach connections, and grant roles across the tenant
- Deploy as an MSP global app - one shared Management API credential, each customer confined to its own Auth0 Organization by organization_id
For employees (self-service)
- Request an Auth0 password-reset link for your own account in this organization
Just ask Dex
Your team types a request in plain language. Dex investigates, plans, and executes — with the right guardrails.
Admin prompts
- >List the members of our Auth0 Organization
- >Invite jordan@example.com to the organization
- >What connections are enabled on this organization?
- >Revoke the pending invitation for taylor@contoso.com
- >Send a password-reset ticket to the member with email casey@acme.com
Employee prompts
- >Send me an Auth0 password-reset link for my account
- >I need to reset my Auth0 password
Policy actions
Every action Dex can take on Auth0 is declared, scoped, and guardrailed. Admins control which apply, who approves them, and whether they're limited to self-service.
| Action | What it does |
|---|---|
auth0_list_organizations | List the MSP's Auth0 Organizations (master connection only) |
auth0_create_organization | Create an Auth0 Organization (master connection only) - creates a new customer partition |
auth0_delete_organization | Delete an Auth0 Organization (master connection only) - irreversible |
auth0_get_organization | Read this Auth0 Organization (name, branding, metadata) |
auth0_update_organization | Update this Auth0 Organization (display name, branding, metadata) |
auth0_list_members | List members of this Auth0 Organization |
auth0_add_members | Add existing Auth0 users as members of this Organization (master connection only) |
auth0_remove_members | Remove members from this Auth0 Organization (does not delete the Auth0 user) |
auth0_list_invitations | List invitations to this Auth0 Organization |
auth0_create_invitation | Invite a user to this Auth0 Organization by email |
auth0_get_invitation | Read one invitation to this Auth0 Organization |
auth0_delete_invitation | Revoke an invitation to this Auth0 Organization |
auth0_list_enabled_connections | List connections enabled for this Auth0 Organization |
auth0_add_enabled_connection | Enable a tenant connection on this Auth0 Organization (master connection only) |
auth0_remove_enabled_connection | Disable a connection on this Auth0 Organization |
auth0_list_member_roles | List roles assigned to a member of this Auth0 Organization |
auth0_add_member_roles | Assign organization roles to a member of this Auth0 Organization (master connection only) |
auth0_remove_member_roles | Remove organization roles from a member of this Auth0 Organization |
auth0_create_password_change_ticket | Create an Auth0 password-change ticket for a member of this Organization |
How to configure Auth0
Onboarding takes minutes. Dex validates your credentials before saving them.
Setup steps
- 1In Auth0 Dashboard, go to Applications > Applications > Create Application and choose Machine to Machine.
- 2Authorize that application for the Auth0 Management API and grant the organization scopes Dex needs (read/create/update/delete for organizations, members, invitations, connections, and member roles, plus create:user_tickets for password resets).
- 3Copy the Client ID and Client Secret, and note your Auth0 tenant domain (e.g. your-tenant.us.auth0.com).
- 4In Dex, enable the Auth0 integration and paste the domain, Client ID, and Client Secret. Leave organization_id blank on the MSP master connection.
- 5Dex validates the credentials with a live call before saving. For MSPs, map each customer tenant to its Auth0 Organization id (org_...) via GET /api/v2/organizations on the master connection.
Credentials required
- domain
- Auth0 tenant hostname, e.g. your-tenant.us.auth0.com (hostname only, no https://)
- client_id
- Machine-to-Machine application Client ID
- client_secret
- Machine-to-Machine Client Secret from the same application (treat like a password)
- organization_id
- This tenant's Auth0 Organization id (org_...) - leave blank on the MSP master connection, set it on the tenant's own connection
Requirements
- •An Auth0 tenant with Organizations and a Machine-to-Machine application authorized for the Auth0 Management API
- •Management API organization scopes granted to match what you enable (create:user_tickets required for password resets)
- •On a tenant-scoped connection, organization-level create/delete, the bare organization get/update/delete, adding members, attaching connections, and granting roles are done from the MSP master connection only
- •For MSPs, deploy as a global app with one shared credential and per-tenant scoping by organization_id
Related integrations
- Directory & Identity
Microsoft Entra ID
Manage Entra ID users, groups, licenses, and sign-in risk through Microsoft Graph.
Learn more → - Directory & Identity
Okta
Run Okta user, group, and app-assignment operations in natural language.
Learn more → - Directory & Identity
JumpCloud
Run your JumpCloud directory conversationally - users, groups, devices, SSO apps, policies, commands, and fleet inventory.
Learn more →
See Dex run Auth0
Book a 30-minute walkthrough with our team and see how autonomous IT works in your environment — or get started for free.