Auth0-authorization-extension rule

Hi Team,

auth0-authorization-extension is a rule authomatically created when we enable auth0-euthorization extension. Since the rules are getting retired, what would happen with the rule? Is there any plan to create an action for this!

And we have defined some groups in the authorization extension page. In rules i could get the groups via user.groups. But in action when I use event.user.groups, it is not listing the groups defined in authorization extension page.

So is there any option to fetch the groups in actions?

Thanks!

Hi Team,

Is there any plans on expiring auth0-authorization-extension?

Thanks!

Hi @ganesh.kumaresan,

For both Rules and Actions, users.groups is an optional attribute provided by a connected identity provider. It is not a normalized Auth0 attribute that is always guaranteed to be set in either case.
The good news is if they are migrating from Rules to Actions, user.groups should now be present in Actions if it was present in Rules.

There’s some more info on Azure AD + groups here: Connect Your App to Microsoft Azure Active Directory

If you want to enable extended attributes (such as Extended Profile or Security Groups), then you will need to configure the following permissions for the Microsoft Graph API.

There are also general docs on root attributes here: User Profile Root Attributes

Also, I would check these articles providing information:

Is there any plans on expiring auth0-authorization-extension?

Thanks,
Timotei

1 Like

Thanks Timotei!

On the Auth0-Extension, The link you had shared was on 2020. So I believe we could still use auth0-extension till we have official update on the deprecation. Correct me if I am wrong!

Thanks!

And this alert is added in the auth0 page,

Hi @ganesh.kumaresan,

Yes, Rules and Hooks will be fully deprecated in November 2024, and it is recommended that you migrate the existing ones to Actions. Migrate to Actions

So, in consequence, auth0-authorization-extension may be affected by these changes.

The Authorization Extension supports user authorization via Groups, Roles, and Permissions.
You can define the expected behavior during the login process, and your configuration settings will be captured in an Action instead of a Rule that’s executed during runtime.

This article speaks only about Rules, but with this deprecation, you can use Actions instead of Rules: Authorization Extension

Please let me know if this answers your question.

Thanks,
Timotei

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.