.well-known/ discovery of tenant domain?

askbjoernhansen · January 28, 2022, 8:41pm

Is there an api or .well-known/ path for discovering the auth0 tenant domain from a custom domain?

The Pomerium software currently needs to be configured both the custom domain (login.example.com) for “user visible” domains and the auth0 domain (example.auth0.com) for API interactions. Is there a way to discover one from the other through an API or .well-known/ address?

github.com/pomerium/pomerium

auth0: can't use groups with custom auth0 domain

opened 10:25AM - 28 Jan 22 UTC

closed 03:58PM - 02 Feb 22 UTC

abh

bug

If I configure my auth0 idp url to https://login.example.com/ instead of https:/…/example.auth0.com/ then groups don't work. The data broker logs: ``` {"level":"warn","service":"identity_manager","error":"auth0: could not list roles: 401 Unauthorized: Bad audience: https://login.example.com/api/v2/","time":"2022-01-28T10:18:18Z","message":"failed to refresh directory users and groups"} ``` According to the auth0 documents, the management API has to be example.auth0.com even if login.example.com is used for logins.

supun · January 30, 2022, 4:49am

Hi @askbjoernhansen ,

Welcome to the Auth0 Community!

I’m afraid, it’s not possible to find the default Auth0 domain from the .well-known endpoint. You will have to use a different configuration to store the default Auth0 domain.

Hope this clarifies your question!