Missing scope for Passkey enrollment: create:me:authentication_methods not appearing in Dashboard

Get Help
,
1

Hello Auth0 Community,

I am currently working on a custom Passkey (WebAuthn) enrollment flow for my application. I am using an Enterprise Agreement tenant.

The Problem:
I need the scope create:me:authentication_methods to initiate the passkey enrollment via the My Account API (POST /me/v1/authentication-methods), but I cannot find this scope anywhere in my Auth0 Dashboard to authorize my application.

What I have tried:

  1. Enabled Passkeys in my Database Connection (Authentication Methods).

  2. Ensured New Universal Login and Identifier First are active.

  3. Looked into APIs > Auth0 Management API > Permissions, but the :me: scopes are missing.

  4. Tried to find the “Auth0 My Account API” under APIs, but even after activation, the specific scope create:me:authentication_methods does not appear in the “Applications” grant list.

  5. Verified my App is marked as a First-party application.

My Goal:
I want to use the /authorize endpoint with scope=create:me:authentication_methods to get an Access Token that allows my frontend to call the enrollment API. Currently, this scope is being filtered out from my token because it’s not “granted” in the dashboard.

Questions:

  • Is there a specific feature flag that needs to be enabled for Enterprise tenants to see “My Account API” scopes?

  • Should I manually add this scope to the Management API, or is there a hidden toggle?

  • Does this require the “Early Access” flag for the My Account API to be turned on by Auth0 Support?

Any guidance would be greatly appreciated!

1 Like
3

Hi @louis.lui.ext,

Welcome to the Auth0 Community!

Exactly, so that is specifically the reason why not all the scopes are yet accessible through the Auth0 Dashboard.

When enabling the My Account API you will be presented by default with only a subset of permissions (e.g. me:connected_accounts type of scopes). In order to enable the rest of permissions available to this API, since you are on an Enterprise Agreement you can contact your TAM directly or submit a support ticket with our Developer Support team.

No. Once the Early Access flag will be enabled for your tenant, the full list of permissions will be listed under the Auth0 My Account API, which is different from the Management API. So then if you click into the MyAccount API and go to the Permissions tab you can enable all the available scopes.

Thank you for your post and if you have further inquiries on the matter please let me know!
Best regards,
Remus

1 Like