Currently Auth0 provides a global client id/secret pair for legacy APIs: https://manage.auth0.com/#/account/advanced Is there any way to disable these entirely? They represent a fairly significant potential security concern if ever leaked since they can’t be easily changed, and since there’s only o…

To my knowledge it’s not possible to disable the availability of the global client information through configuration; like you mentioned, this has the side-effect that it implies the existence of the equivalent to an API key that could be used on legacy management API’s. Having said that, I’m also …

Possible to disable global API/Secret?

Get Help

Topic		Replies	Views
Is it possible to change Client ID and Client Secret? Get Help auth0	6	5136	October 21, 2020
Location of Tenant's Global Client ID and Secret Knowledge Articles tenant , client-secret , client-id	1	1107	October 27, 2023
Generating separate client ID / client Secret key pairs for each client of my API (potentially, thousands) Get Help	2	3006	May 30, 2020
Client Secret Rotation for M2M Applications in Auth0 Get Help extensions , delegated-administration-dashboard	2	53	December 17, 2024
Is it possible to have multiple app secrets? Get Help	3	7216	August 15, 2019

Possible to disable global API/Secret?

Related topics