We have a monitoring service that will be installed on several of our client’s servers.
We will have a dashboard application which needs to retrieve data from all the monitoring services.
The user will be authenticated on the dashboard app using username/password; no problem.
but the dashboard itself needs to be authenticated with an M2M token to call the different monitoring services.
This does sound like an ideal use for M2M authorization - The way I see it is you could have 1 M2M application in Auth0 authorized for 3 different APIs (1 per service) registered in Auth0.