Using Auth0 to authenticate external users to SharePoint Online

[sumansaurav]

1. License requirements:

• Ensure your Microsoft 365 license supports external sharing and guest access
• Verify your Auth0 subscription supports enterprise connections

1. Auth0 User/Group Management Integration:

• When Auth0 users are provisioned to Azure AD as guests, they get a corresponding Azure AD identity
• Auth0 groups can be mapped to Azure AD groups through SAML/OAuth claims
• The mapping process typically looks like this:
  
  

2. Applying Security Policies:

• You have several options for implementing security policies:

a. Direct Group Mapping:

• Create Auth0 groups that match your security requirements
• Map these groups to Azure AD security groups
• Assign SharePoint permissions to these Azure AD groups

b. Dynamic Group Assignment:

• Use Auth0 Rules/Actions to dynamically assign users to groups based on their attributes
• These group memberships can then flow to Azure AD
• SharePoint inherits these group assignments

3. Permission Management:

• SharePoint permissions can be managed at multiple levels:

  • Site level
  • Library level
  • Folder level
  • File level

• You can assign these permissions to the Azure AD groups that are mapped from Auth0

• Implementation Steps:

  • Set up groups in Auth0
  • Configure group claim mapping in your Auth0 application
  • Set up corresponding security groups in Azure AD
  • Configure SharePoint permission levels
  • Assign permissions to mapped groups

Helpful Resources:

Identity Providers

Enterprise Identity Providers