--- title: "APEX and Auth0: A Seamless Single Sign-On Integration" description: Integrate Auth0 with Oracle APEX for seamless single sign-on, enhancing user experience and security across web applications. image: https://content.dsp.co.uk/hubfs/APEX%20and%20Auth0%20A%20Seamless%20Single%20Sign-On%20Integration%20Image%201.jpg --- [![DSP From Ground to Cloud](https://content.dsp.co.uk/hubfs/Logos/DSP%20From%20Ground%20to%20Cloud/DSP-Logo-Colour-From-Ground-to-Cloud.svg "DSP From Ground to Cloud")](https://dsp.co.uk) [![DSP From Ground to Cloud](https://content.dsp.co.uk/hs-fs/hubfs/2023/Logos/DSP/DSP-Logo-2019-White-600px.png?width=70&height=72&name=DSP-Logo-2019-White-600px.png "DSP From Ground to Cloud")](https://dsp.co.uk) - Services - Consulting Services - [Oracle](https://www.dsp.co.uk/oracle-consultancy) - [Microsoft](https://www.dsp.co.uk/sql-server-consultancy) - [Google](https://www.dsp.co.uk/google-cloud-consultancy) - [Architecture](https://www.dsp.co.uk/solution-design-and-architecture) - Managed Services - [Oracle Managed Services](https://www.dsp.co.uk/oracle-managed-services) - [SQL Server Managed Services](https://www.dsp.co.uk/sql-server-managed-services) - [OCI Managed Services](https://www.dsp.co.uk/oracle-cloud-infrastructure-managed-services) - [Azure Managed Services](https://www.dsp.co.uk/azure-managed-services) - [On Premise Apps Managed Services](https://www.dsp.co.uk/application-managed-services) - [Cloud Apps Managed Services](https://www.dsp.co.uk/oracle-cloud-applications-services) - Licensing and SAM - [Oracle Licensing](https://www.dsp.co.uk/oracle-licensing-services) - [Software Asset Management](https://www.dsp.co.uk/oracle-software-asset-management-sam) - Application Services - [Application Development](https://www.dsp.co.uk/software-development) - [Application Modernisation](https://www.dsp.co.uk/legacy-software-modernisation) - [Oracle Forms to Oracle APEX](https://www.dsp.co.uk/oracle-forms-to-oracle-apex) - [Application Extensions](https://www.dsp.co.uk/software-customisation) - [Archiving Solutions](https://www.dsp.co.uk/application-archiving-solution) - [Application Hosting](https://www.dsp.co.uk/oracle-apex-hosting-services) - [Development Training](https://www.dsp.co.uk/oracle-apex-training) - Data Science - [AI Strategy](https://www.dsp.co.uk/ai-strategy) - [Responsible AI and Governance](https://www.dsp.co.uk/responsible-ai) - [Agentic AI](https://www.dsp.co.uk/agentic-ai) - [Data Management for AI](https://www.dsp.co.uk/data-management) - [Power BI](https://www.dsp.co.uk/power-bi-services) - [Microsoft Fabric](https://www.dsp.co.uk/microsoft-fabric-services) - [Machine Learning](https://www.dsp.co.uk/oci-machine-learning) - Cloud Migration and Management - [Cloud Readiness and Design](https://www.dsp.co.uk/oracle-cloud-readiness-assessment) - [Migration to Fusion and Cloud Applications](https://www.dsp.co.uk/oracle-cloud-application-modernisation) - [Migration to Cloud Infrastructure](https://www.dsp.co.uk/oracle-cloud-migration) - [Private Cloud](https://www.dsp.co.uk/oracle-private-cloud-services) - [Database@ Hyperscaler](https://www.dsp.co.uk/multicloud-management) - [FinOps and Optimisation](https://www.dsp.co.uk/optimise-oracle-cloud-infrastructure) - Integration and APIs - [API Management](https://www.dsp.co.uk/api-development-services) - [GoldenGate](https://www.dsp.co.uk/oracle-goldengate-services) - Disaster Recovery and Security - [Disaster Recovery](https://www.dsp.co.uk/oracle-database-disaster-recovery-solutions) - [Security Compliance](https://www.dsp.co.uk/data-security) - [Cloud Security](https://www.dsp.co.uk/cloud-security)   ![Oracle Partner, Microsoft Partner and Google Partner](https://content.dsp.co.uk/hubfs/logo-2021/Partner-logos/multiple-vendor/rectangle-2022/Partner-logos-rectangle-Nov21.svg) #### Getting to know us - [About us](https://www.dsp.co.uk/about) - [What we do](https://www.dsp.co.uk/what-we-do) - [Leadership](https://www.dsp.co.uk/dsp-product-leads) - [Careers](https://www.dsp.co.uk/careers) - Technologies - Oracle Cloud Infrastructure - [Oracle Cloud Infrastructure](https://www.dsp.co.uk/oracle-cloud-infrastructure-services) - [IaaS](https://www.dsp.co.uk/iaas) - [PaaS](https://www.dsp.co.uk/paas-security) - Oracle Database - [Oracle Database](https://www.dsp.co.uk/oracle-database-consulting) - [Autonomous Database](https://www.dsp.co.uk/oracle-autonomous-database-services) - [MySQL and Heatwave](https://www.dsp.co.uk/mysql-services) - [Oracle APEX](https://www.dsp.co.uk/oracle-apex-services) - Oracle Engineered Systems - [Oracle Exadata](https://www.dsp.co.uk/exadata-database-service-consultancy) - [Oracle Database Appliance](https://www.dsp.co.uk/oracle-database-appliance) - Oracle Applications - [Oracle Fusion and Cloud Applications](https://www.dsp.co.uk/oracle-fusion-services) - [Oracle E-Business Suite](https://www.dsp.co.uk/oracle-ebs-services) - [JD Edwards](https://www.dsp.co.uk/jd-edwards-services) - [Peoplesoft](https://www.dsp.co.uk/oracle-peoplesoft-services) - [Hyperion](https://www.dsp.co.uk/oracle-hyperion-services) - Microsoft - [SQL Server](https://www.dsp.co.uk/sql-server-consultancy) - [Microsoft Azure](https://www.dsp.co.uk/microsoft-azure-services) - [Power BI](https://www.dsp.co.uk/power-bi-services) - [Microsoft Fabric](https://www.dsp.co.uk/microsoft-fabric-services) - Google - [Google Cloud Platform (GCP)](https://www.dsp.co.uk/google-cloud-partner) - Multicloud and Database Hyperscaler - [Oracle Database@Azure](https://www.dsp.co.uk/oracle-databaseazure-partner) - [Oracle Database@GCP](https://www.dsp.co.uk/google-cloud-machine-learning) - [Oracle Database@AWS](https://www.dsp.co.uk/amazon-web-services-aws) - [Oracle Azure Interconnect](https://www.dsp.co.uk/oracle-microsoft-multicloud) - Open Source Database - [PostgreSQL](https://www.dsp.co.uk/postgresql-services) - [MySQL](https://www.dsp.co.uk/mysql-services) - [MariaDB](https://www.dsp.co.uk/migration-from-mariadb-to-mysql) #### Managed Services - [Oracle Database](https://www.dsp.co.uk/oracle-managed-services) - [SQL Server](https://www.dsp.co.uk/sql-server-managed-services) - [MySQL](https://www.dsp.co.uk/mysql-support) #### Application Services - [Oracle Applications](https://www.dsp.co.uk/oracle-application-cloud-migration) - [Oracle APEX](https://www.dsp.co.uk/oracle-apex-services) - [Microsoft](https://www.dsp.co.uk/microsoft-partnership) - [ISV Services](https://www.dsp.co.uk/isv-support-and-services) #### Cloud Services - [Oracle Cloud Infrastructure](https://www.dsp.co.uk/oracle-cloud-services) - [Microsoft Azure](https://www.dsp.co.uk/microsoft-azure-services) - [Google Cloud Platform](https://www.dsp.co.uk/gcp-database) - [Multi-cloud](https://www.dsp.co.uk/oracle-microsoft-multicloud) #### Data Science - [Machine Learning](https://www.dsp.co.uk/machine-learning-consulting-services) - [Business Intelligence](https://www.dsp.co.uk/business-intelligence-services) - [Artificial Intelligence](https://www.dsp.co.uk/artificial-intelligence-consulting-services) #### Consulting Services - [Oracle](https://www.dsp.co.uk/oracle-consultancy) - [Microsoft](https://www.dsp.co.uk/sql-server-consultancy) - [Google](https://www.dsp.co.uk/google-cloud-consultancy) - [Cloud Migration](https://www.dsp.co.uk/cloud-migrations) #### Technology Solutions - [Engineered Systems](https://www.dsp.co.uk/oracle-engineered-systems-partner) - [Data Security](https://www.dsp.co.uk/data-security) - [Database Architecture](https://www.dsp.co.uk/solution-design-and-architecture) - [Disaster Recovery](https://www.dsp.co.uk/database-disaster-recovery) - Industries - [Finance](https://www.dsp.co.uk/finance) - [Healthcare](https://www.dsp.co.uk/healthcare-it-services) - [Travel and Transport](https://www.dsp.co.uk/database-solutions-for-travel-and-transport) - [Higher Education](https://www.dsp.co.uk/higher-education) - [Public Sector](https://www.dsp.co.uk/public-sector) - [Manufacturing](https://www.dsp.co.uk/manufacturing) - [Retail](https://www.dsp.co.uk/retail) - [Software Vendors](https://www.dsp.co.uk/isv-support-and-services) ### Recent case study: #### Oracle EBS Cloud Deployment Consolidating and Migrating assets into Oracle Cloud Infrastructure. [**![Oracle EBS Cloud Deployment](https://content.dsp.co.uk/hs-fs/hubfs/stonewater-logo%20(1).png?width=250&name=stonewater-logo%20(1).png)**](https://www.dsp.co.uk/stonewater)   #### Most Visited Pages - [Oracle Licensing](https://www.dsp.co.uk/oracle-licensing) - [Oracle Cloud Calculator](https://www.oracle-cloud-calculator.com/) - [Oracle Cloud Migration](https://www.dsp.co.uk/oracle-cloud-migration) - [Oracle Exadata Services](https://www.dsp.co.uk/oracle-exadata-services) - [Artificial Intelligence Services](https://www.dsp.co.uk/artificial-intelligence-consulting-services) #### - - [SQL Server Support](https://www.dsp.co.uk/sql-server-support) - [Oracle Support](https://www.dsp.co.uk/oracle-support) - [Google Cloud Consultancy](https://www.dsp.co.uk/google-cloud-consultancy) - [New Application Development](https://www.dsp.co.uk/oracle-apex-services) - [Azure Virtual Desktop](https://www.dsp.co.uk/azure-virtual-desktop) - Resources - [Gartner ](https://www.dsp.co.uk/complimentary-gartner-download) - [ISG](https://www.dsp.co.uk/isg-oracle-report) - [Blogs](https://www.dsp.co.uk/blogs) - [Case Studies](https://www.dsp.co.uk/case-studies) - [Testimonials](https://www.dsp.co.uk/testimonials) - [Events](https://www.dsp.co.uk/events) - [Webinars](https://www.dsp.co.uk/webinars) - [Insights](https://www.dsp.co.uk/insights) - [Technical Resources](https://www.dsp.co.uk/technical-resources) ### DSP-Explorer acquires leading Oracle Applications Managed Services Provider, Claremont, to further extend its data management capabilities.   [![Read More](https://no-cache.hubspot.com/cta/default/3321273/c7e13c9c-65e1-46e7-8541-8da86a4fc305.png)](https://cta-redirect.hubspot.com/cta/redirect/3321273/c7e13c9c-65e1-46e7-8541-8da86a4fc305) #### Resources - [Blogs](https://www.dsp.co.uk/blogs) - [Webinars](https://www.dsp.co.uk/webinars) - [Case Studies](https://www.dsp.co.uk/case-studies) - [Testimonials](https://www.dsp.co.uk/testimonials) - About - [About DSP](https://www.dsp.co.uk/about) - [What We Do](https://www.dsp.co.uk/what-we-do) - [DSP Group Board ](https://www.dsp.co.uk/dsp-group-board) - [Careers](https://www.dsp.co.uk/careers) - [Project Harar](https://www.dsp.co.uk/project-harar) - [Customer Area](https://www.dsp.co.uk/contact-us) - [Customer Support Portal](https://dspgroup-ism.ivanticloud.com/) - [Customer Resources](https://www.dsp.co.uk/welcome) - [Contact us](https://www.dsp.co.uk/contact-us) # APEX and Auth0: A Seamless Single Sign-On Integration [ Jamie Lambertstock ](https://content.dsp.co.uk/author/jamie-lambertstock) 30-Oct-2024 10:42:50 APEX and Auth0: A Seamless Single Sign-On Integration 14:44 ### Contents [19-Apr-2016 12:06:32 APEX Authentication and Authorisation for Forms Developers ](https://content.dsp.co.uk/apex-authentication-and-authorisation-for-forms-developers) [15-Feb-2023 14:35:23 Implement AWS Cognito Authentication in your APEX Application ](https://content.dsp.co.uk/implement-aws-cognito-authentication-in-your-apex-application) [19-Sep-2024 12:21:56 Implementing & Managing Certificates for APEX in OCI ](https://content.dsp.co.uk/implementing-managing-certificates-for-apex-in-oci) ## Introduction In today's interconnected world, providing a seamless and secure authentication experience is a must for modern web applications. Whether managing internal tools or client-facing platforms, users expect a streamlined, centralised login process that works across multiple applications. This is where Single Sign-On (SSO) comes into play. SSO enables a single login that works across different systems, enhancing both user experience and security. One of the most effective ways I have found to implement SSO is through Auth0, a versatile identity and access management platform. Auth0 simplifies the often-complex authentication process by providing a secure, cloud-based solution that can be integrated with virtually any application. Whether it's social logins (Google, Facebook, etc.), enterprise connections (like LDAP or Microsoft Active Directory), or custom databases, Auth0 supports a variety of authentication methods, allowing developers to implement robust security without reinventing the wheel. This blog post explores how to integrate Auth0 with [Oracle APEX](https://www.dsp.co.uk/oracle-apex-services), a low-code [application development](https://www.dsp.co.uk/oracle-apex-application-development) platform, to manage authentication and user roles. We'll guide you through setting up Auth0 as an authentication scheme within Oracle APEX, dynamically retrieving user roles and mapping them to authorisation schemes to control access to various components of your application. While the focus will be on Oracle APEX, we'll briefly touch on how Auth0's flexibility allows you to extend this authentication setup to other technologies, such as ASP.NET Core, showcasing how you can create a unified login experience across multiple applications using different tech stacks. Let's dive into the power of Auth0 and see how it can transform your Oracle APEX application by simplifying authentication and delivering a unified, secure login experience.   ## Setting Up Auth0 in Oracle APEX In this section, we'll walk through the process of setting up Auth0 to handle authentication for your Oracle APEX application. We'll start by configuring the necessary details in Oracle APEX and then move over to the Auth0 dashboard to create and configure the required applications.   ### What You'll Need from Oracle APEX Before we dive into the Auth0 configuration, you'll need to gather a couple of key details from Oracle APEX: 1. Callback URL: This is the URL that Auth0 will use to redirect users back to your Oracle APEX application after successful authentication. You can retrieve this by running the following query in Oracle APEX: ``` SELECT APEX_AUTHENTICATION.GET_CALLBACK_URL FROM DUAL;  ``` The result will look something like this for apex.oracle.com: ``` https://apex.oracle.com/pls/apex/apex_authentication.callback ``` For other environments, the base part of the URL may differ, but the structure remains the same. You can ignore any query string parameters after the callback portion of the URL. 2. APEX App Home URL: This is where users will be redirected after logging in, typically the home page of your Oracle APEX app. It's often set to page 1, or if you are using friendly URLs, it could be something like /home. For example: ``` https://apex.oracle.com/pls /apex/r/ws_dsp/auth-demo/home ```   ## Configuring Auth0 With the necessary APEX URLs, we can now set up Auth0 to handle authentication for your Oracle APEX application.   ### Accessing the Auth0 Dashboard Head to [Auth0's website](https://auth0.com/), if you haven't signed up, to create a free account. Once registered, you can log in to the [Auth0 dashboard](https://manage.auth0.com/),  where you'll manage applications, users, roles, and more. 1. Create the Main Application in Auth0 - Log in to the **Auth0 dashboard** and go to the **Applications** section. - Click **Create Application** and choose a name for the app that will handle authentication for Oracle APEX. - Select **Regular Web Applications** as the application type. [![APEX and Auth0 A Seamless Single Sign-On Integration](https://content.dsp.co.uk/hs-fs/hubfs/APEX%20and%20Auth0%20A%20Seamless%20Single%20Sign-On%20Integration%20Image%201.jpg?width=797&height=689&name=APEX%20and%20Auth0%20A%20Seamless%20Single%20Sign-On%20Integration%20Image%201.jpg)](https://content.dsp.co.uk/hubfs/APEX%20and%20Auth0%20A%20Seamless%20Single%20Sign-On%20Integration%20Image%201.jpg)   2. Configure the Application Settings - In the application's settings, add the **Callback URL** that you retrieved from Oracle APEX. - Set the **Logout URL** to your **APEX App Home URL**, which will redirect users back to the app after they log out. [![APEX and Auth0 A Seamless Single Sign-On Integration](https://content.dsp.co.uk/hs-fs/hubfs/APEX%20and%20Auth0%20A%20Seamless%20Single%20Sign-On%20Integration%20Image%202.jpg?width=805&height=565&name=APEX%20and%20Auth0%20A%20Seamless%20Single%20Sign-On%20Integration%20Image%202.jpg)](https://content.dsp.co.uk/hubfs/APEX%20and%20Auth0%20A%20Seamless%20Single%20Sign-On%20Integration%20Image%202.jpg)   3. Copy Client ID and Client Secret - In the **Credentials** tab of the newly created application, copy the **Client ID** and **Client Secret**. These will be used later when configuring Auth0 on APEX. [![APEX and Auth0 A Seamless Single Sign-On Integration](https://content.dsp.co.uk/hs-fs/hubfs/APEX%20and%20Auth0%20A%20Seamless%20Single%20Sign-On%20Integration%20Image%203.jpg?width=805&height=589&name=APEX%20and%20Auth0%20A%20Seamless%20Single%20Sign-On%20Integration%20Image%203.jpg)](https://content.dsp.co.uk/hubfs/APEX%20and%20Auth0%20A%20Seamless%20Single%20Sign-On%20Integration%20Image%203.jpg)   4. Create the Second Application for API Access - Go back to the **Applications** section and click **Create Application** again. - Name this second application and select **Machine to Machine Applications** as the type. - When prompted to select an API, choose **Auth0 Management API** (or your custom API if you've set one up). - Under** Permissions**, select: - read:users - read:roles - read:role_members This setup will allow the application to query the user roles and other relevant information. [![APEX and Auth0 A Seamless Single Sign-On Integration](https://content.dsp.co.uk/hs-fs/hubfs/APEX%20and%20Auth0%20A%20Seamless%20Single%20Sign-On%20Integration%20Image%204.jpg?width=802&height=708&name=APEX%20and%20Auth0%20A%20Seamless%20Single%20Sign-On%20Integration%20Image%204.jpg)](https://content.dsp.co.uk/hubfs/APEX%20and%20Auth0%20A%20Seamless%20Single%20Sign-On%20Integration%20Image%204.jpg)   5. Copy Client ID and Client Secret for API Access - As with the first app, go to the **Credentials **tab of this second application and copy down the **Client ID** and **Client Secret**. You'll use these credentials to securely retrieve user roles from Auth0. [![APEX and Auth0 A Seamless Single Sign-On Integration](https://content.dsp.co.uk/hs-fs/hubfs/APEX%20and%20Auth0%20A%20Seamless%20Single%20Sign-On%20Integration%20Image%205.jpg?width=807&height=604&name=APEX%20and%20Auth0%20A%20Seamless%20Single%20Sign-On%20Integration%20Image%205.jpg)](https://content.dsp.co.uk/hubfs/APEX%20and%20Auth0%20A%20Seamless%20Single%20Sign-On%20Integration%20Image%205.jpg) ### Creating an Organisation in Auth0 To enhance the branding and management of your login page, we can create an Organisation within Auth0. Organisations allow customised branding, better user management, and other useful features. Here's how to create and configure an organisation in Auth0: Step 1: Create an Organisation 1. In the Auth0 dashboard, navigate to the Organisations tab in the menu on the left-hand side. 2. Click on Create Organisation. 3. Enter a Readable ID (used internally and for URLs) and a Display Name (visible to users). - The Readable ID should be a URL-friendly identifier, such as your-org-name. - The Display Name will be seen by users on the login page, so make sure it's clear and recognisable. [![APEX and Auth0 A Seamless Single Sign-On Integration](https://content.dsp.co.uk/hs-fs/hubfs/APEX%20and%20Auth0%20A%20Seamless%20Single%20Sign-On%20Integration%20Image%206.jpg?width=807&height=430&name=APEX%20and%20Auth0%20A%20Seamless%20Single%20Sign-On%20Integration%20Image%206.jpg)](https://content.dsp.co.uk/hubfs/APEX%20and%20Auth0%20A%20Seamless%20Single%20Sign-On%20Integration%20Image%206.jpg)   Step 2: Configure Connections 1. After creating the organisation, click on the Connections tab. 2. Select Username-Password-Authentication (or other appropriate connection types) and link it to the organisation. - This ensures that users logging in via this organisation will authenticate using their username and password. ![APEX and Auth0 A Seamless Single Sign-On Integration Image 7](https://content.dsp.co.uk/hs-fs/hubfs/APEX%20and%20Auth0%20A%20Seamless%20Single%20Sign-On%20Integration%20Image%207.jpg?width=805&height=450&name=APEX%20and%20Auth0%20A%20Seamless%20Single%20Sign-On%20Integration%20Image%207.jpg)   Step 3: Note the Organisation ID Once the organisation is created and configured, make a note of the Organisation ID. This ID will be required when we configure Oracle APEX to use Auth0. You can find the Organisation ID in the Settings tab of your organisation. [![APEX and Auth0 A Seamless Single Sign-On Integration](https://content.dsp.co.uk/hs-fs/hubfs/APEX%20and%20Auth0%20A%20Seamless%20Single%20Sign-On%20Integration%20Image%208.jpg?width=751&height=343&name=APEX%20and%20Auth0%20A%20Seamless%20Single%20Sign-On%20Integration%20Image%208.jpg)](https://content.dsp.co.uk/hubfs/APEX%20and%20Auth0%20A%20Seamless%20Single%20Sign-On%20Integration%20Image%208.jpg)   ### Next Steps: Configuring Oracle APEX to Use Auth0 Now that we've set up our Auth0 applications, we can configure Oracle APEX to use Auth0 as its authentication provider. Follow the steps below to integrate Auth0 into your APEX application and map user attributes to application items. Step 1: Add Auth0 Credentials to Oracle APEX 1. Navigate to Workspace Utilities within your Oracle APEX instance. 2. Select Web Credentials, then click Create. 3. Give it a meaningful name, such as Auth0, and assign it a static ID, like Auth0. 4. For Authentication Type, select Basic Authentication. 5. Paste the Client ID and Client Secret from your main Auth0 application and click Save. Step 2: Configure APEX to Use Auth0 for Authentication 1. Go to the APEX application you want to configure. 2. Navigate to Shared Components and select Authentication Schemes. 3. Create a new authentication scheme by pressing Create. 4. Select Based on a pre-configured scheme from the gallery, give it a name (e.g., Auth0), and choose Social Sign-In as the scheme type.   Step 3: Configure Authentication Scheme Settings Once inside the authentication scheme setup, configure the following settings. (Adjust these as needed for your environment.) [![APEX and Auth0 A Seamless Single Sign-On Integration](https://content.dsp.co.uk/hs-fs/hubfs/APEX%20and%20Auth0%20A%20Seamless%20Single%20Sign-On%20Integration%20Image%209.jpg?width=816&height=484&name=APEX%20and%20Auth0%20A%20Seamless%20Single%20Sign-On%20Integration%20Image%209.jpg)](https://content.dsp.co.uk/hubfs/APEX%20and%20Auth0%20A%20Seamless%20Single%20Sign-On%20Integration%20Image%209.jpg) [![APEX and Auth0 A Seamless Single Sign-On Integration](https://content.dsp.co.uk/hs-fs/hubfs/APEX%20and%20Auth0%20A%20Seamless%20Single%20Sign-On%20Integration%20Image%2010.jpg?width=808&height=718&name=APEX%20and%20Auth0%20A%20Seamless%20Single%20Sign-On%20Integration%20Image%2010.jpg)](https://content.dsp.co.uk/hubfs/APEX%20and%20Auth0%20A%20Seamless%20Single%20Sign-On%20Integration%20Image%2010.jpg) After entering these values, click Save. Step 4: Create Application Items for User Attributes We've used the variable G_SUB in the configuration above, which maps to the sub claim from Auth0. This claim identifies the user. We need to create an application item to store this data. 1. Go back to the **Shared Components **for your app. 2. Under Application Items, click Create and define the following item: - **G_SUB** 3. Set **Session State Protection** for both items to **Restricted - May not be set from browser.**   ## Retrieving and Managing User Roles in Oracle APEX Now that we've configured Auth0 as the authentication provider for Oracle APEX, we need a way to retrieve user roles from Auth0. We will use a custom PL/SQL package to call Auth0's API, fetch the roles for the authenticated user, and handle them within APEX. Below is the package we'll create to manage user roles. Step 1: Creating the PL/SQL Package Create a PL/SQL package in Oracle APEX called AUTH0_UTILS_PKG. This package contains the functions and procedures that will handle retrieving user roles from Auth0. Here's the full package body: ``` CREATE OR REPLACE PACKAGE BODY "AUTH0_UTILS_PKG" AS    ----------------------------------------------------------------------------    -- CONSTANTS - AUTH0 DETAILS     ----------------------------------------------------------------------------    CLIENT_ID       CONSTANT VARCHAR2 (100) := '' ; -- Set your Auth0 client ID    CLIENT_SECRET   CONSTANT VARCHAR2 (100) := '' ; -- Set your Auth0 client secret    DOMAIN          CONSTANT VARCHAR2 (100) := '' ; -- Set your Auth0 domain (e.g., https://your-domain.uk.auth0.com)    ----------------------------------------------------------------------------    -- FUNCTION GET_ACCESS_TOKEN    ----------------------------------------------------------------------------    FUNCTION GET_ACCESS_TOKEN RETURN VARCHAR2 IS        v_ACCESS_TOKEN      VARCHAR2 (1000) ;        v_REQUEST           CLOB ;        v_RESPONSE          CLOB ;        BEGIN        -- 1. CREATE JSON BODY FOR REQUEST        SELECT  JSON_OBJECT (                    KEY 'client_id'     VALUE CLIENT_ID,                    KEY 'client_secret' VALUE CLIENT_SECRET,                    KEY 'audience'      VALUE DOMAIN || '/api/v2/',                    KEY 'grant_type'    VALUE 'client_credentials'                ) AS REQUEST_BODY        INTO    v_REQUEST        FROM    DUAL ;        -- 2. RESET HEADERS        APEX_WEB_SERVICE.G_REQUEST_HEADERS.DELETE() ;        APEX_WEB_SERVICE.G_REQUEST_HEADERS(1).NAME  := 'Content-Type' ;        APEX_WEB_SERVICE.G_REQUEST_HEADERS(1).VALUE := 'application/json' ;        -- 3. GET OUR ACCESS TOKEN FROM AUTH0        v_RESPONSE := APEX_WEB_SERVICE.MAKE_REST_REQUEST (            p_url           => DOMAIN || '/oauth/token',            p_http_method   => 'POST',            p_body          => v_REQUEST        ) ;        -- 4. EXTRACT TOKEN FROM REQUEST        SELECT  ACCESS_TOKEN        INTO    v_ACCESS_TOKEN        FROM    JSON_TABLE ( v_RESPONSE, '$' COLUMNS (            ACCESS_TOKEN    VARCHAR2    PATH '$.access_token',            SCOPE           VARCHAR2    PATH '$.scope',            EXPIRES_IN      NUMBER      PATH '$.expires_in',            TOKEN_TYPE      VARCHAR2    PATH '$.token_type'        ) ) ;        RETURN v_ACCESS_TOKEN ;        END GET_ACCESS_TOKEN ;    ----------------------------------------------------------------------------    -- PROCEDURE MAP_USERS_ROLES    ----------------------------------------------------------------------------    PROCEDURE MAP_USERS_ROLES (        p_SUBJECT_USER  IN VARCHAR2    ) IS        v_RESPONSE      CLOB ;        v_ROLES         APEX_T_VARCHAR2 ;        v_TOKEN         VARCHAR2 (1000) ;        BEGIN        -- 1. GET ACCESS TOKEN        v_TOKEN := GET_ACCESS_TOKEN ;            -- 2. RESET HEADERS & SET TOKEN AUTH        APEX_WEB_SERVICE.G_REQUEST_HEADERS.DELETE() ;        APEX_WEB_SERVICE.G_REQUEST_HEADERS(1).NAME  := 'Authorization' ;        APEX_WEB_SERVICE.G_REQUEST_HEADERS(1).VALUE := 'Bearer ' || v_TOKEN ;        -- 3. GET USER ROLES        v_RESPONSE := APEX_WEB_SERVICE.MAKE_REST_REQUEST (            p_url           => DOMAIN || '/api/v2/users/' || p_SUBJECT_USER || '/roles',            p_http_method   => 'GET'        ) ;        -- 4. LOOP THROUGH ROLES        FOR r_ROLES IN (            SELECT  *            FROM    JSON_TABLE ( v_RESPONSE, '$[*]' COLUMNS (                ID              VARCHAR2    PATH '$.id',                NAME            VARCHAR2    PATH '$.name',                DESCRIPTION     VARCHAR2    PATH '$.description'            ) )        ) LOOP            -- 5. FOR EACH ROLE, ADD IT TO v_ROLES            APEX_STRING.PUSH ( v_ROLES, r_ROLES.NAME ) ;        END LOOP ;        -- 6. MAP ROLES TO AUTHORIZATION SCHEME ROLES        APEX_AUTHORIZATION.ENABLE_DYNAMIC_GROUPS ( v_ROLES ) ;        END MAP_USERS_ROLES ;    ----------------------------------------------------------------------------    -- PROCEDURE AUTH_SCHEME_POST_PROCESSING    ----------------------------------------------------------------------------    PROCEDURE AUTH_SCHEME_POST_PROCESSING IS        v_SUBJECT   VARCHAR2 (100) ;        BEGIN        -- 1. GET USER (SUBJECT) FROM APP ITEMS        v_SUBJECT := APEX_UTIL.URL_ENCODE ( v( 'G_SUB' ) ) ;            -- 2. MAP USER (SUBJECT) TO APEX ROLES        MAP_USERS_ROLES ( v_SUBJECT ) ;        END AUTH_SCHEME_POST_PROCESSING ;END "AUTH0_UTILS_PKG"; ```   Step 2: Understanding the Package Components Now, let's break down the key components of this package: 1. **GET_ACCESS_TOKEN:** This function sends a request to Auth0 to retrieve an access token. The token is needed to authenticate API calls to Auth0. - It builds a JSON request containing the client ID and secret, then sends this request using the **APEX_WEB_SERVICE **package. - The response contains the access token, which is returned for use in subsequent API calls. 2. **MAP_USERS_ROLES:** This procedure uses the access token to fetch the roles assigned to a specific user from Auth0. - It sends a GET request to the Auth0 Management API using the user's subject (**sub**) and retrieves the roles. - The roles are then added to an internal list (**APEX_T_VARCHAR2**) and mapped to authorisation schemes within APEX using **APEX_AUTHORIZATION.ENABLE_DYNAMIC_GROUPS**. 3. **AUTH_SCHEME_POST_PROCESSING**: This procedure is automatically called after a user logs in. It retrieves the user's subject ID (from **G_SUB**) and maps the user to their Auth0 roles by calling **MAP_USERS_ROLES.**   ## Mapping Auth0 Roles to Authorisation Schemes in Oracle APEX Now that we've set up the PL/SQL package to retrieve roles from Auth0, the next step is to map those roles to Oracle APEX's authorisation schemes. This allows us to control access to different parts of the application based on the roles assigned to users in Auth0. Step 1: Add Roles in Auth0 1. In the Auth0 dashboard, navigate to **User Management** and then **Roles**. 2. Click on **Create Role**. 3. Provide a name for the role (e.g., **Admin, Editor**), and optionally add a description to clarify its purpose. 4. Save the role. ![APEX and Auth0 A Seamless Single Sign-On Integration Image 11](https://content.dsp.co.uk/hs-fs/hubfs/APEX%20and%20Auth0%20A%20Seamless%20Single%20Sign-On%20Integration%20Image%2011.jpg?width=807&height=504&name=APEX%20and%20Auth0%20A%20Seamless%20Single%20Sign-On%20Integration%20Image%2011.jpg)   Step 2: Create Authorisation Schemes in Oracle APEX Next, we'll create matching authorisation schemes in Oracle APEX to map these roles from Auth0. 1. In Oracle APEX, go to your application's **Shared Components**. 2. Select **Authorisation Schemes**. 3. Click **Create**, and choose **From Scratch**. Now, fill out the following details: [![APEX and Auth0 A Seamless Single Sign-On Integration](https://content.dsp.co.uk/hs-fs/hubfs/APEX%20and%20Auth0%20A%20Seamless%20Single%20Sign-On%20Integration%20Image%2012.jpg?width=823&height=159&name=APEX%20and%20Auth0%20A%20Seamless%20Single%20Sign-On%20Integration%20Image%2012.jpg)](https://content.dsp.co.uk/hubfs/APEX%20and%20Auth0%20A%20Seamless%20Single%20Sign-On%20Integration%20Image%2012.jpg) Repeat this process for any additional roles you want to map from Auth0 to APEX. Step 3: Checking User Roles in Oracle APEX Once you have the roles mapped in APEX, you can use them in your application to control access. For example, you can use the following PL/SQL code to check if the current user is a member of a specific role: ``` RETURN APEX_AUTHORIZATION.IS_MEMBER( 'Role_Name' );  ``` This function will return TRUE if the user has the specified role and FALSE otherwise. You can also use APEX's built-in Authorisation Scheme section to apply these checks to components like pages, regions, and buttons, ensuring that only users with the correct roles from Auth0 can access certain parts of your app.   ## Using Auth0 for Other Web Applications (ASP.NET Core Example) One of the great advantages of using Auth0 is its flexibility to work across different web applications and technology stacks. Whether you're building applications in Oracle APEX, ASP.NET Core, or any other framework, Auth0 allows you to create multiple applications that can all share the same login details. This means your users can enjoy a unified login experience across all of your apps.   ### Creating Additional Applications in Auth0 You can create multiple applications within Auth0 and configure them for different platforms or projects. Each application will have its own Client ID, Client Secret, and configurations, but your users will be able to log in with the same credentials across all of them. For example, here's how you can easily configure an ASP.NET Core application to use Auth0: 1. Create a new Application in Auth0 for your ASP.NET Core app, similar to how we set up the Oracle APEX application. 2. Plug the Client ID, Client Secret, and Domain from Auth0 into your ASP.NET Core app's** appsettings.json**. 3. Use the Auth0 SDK for ASP.NET Core to handle authentication, ensuring your users can log in with the same credentials as they do for Oracle APEX. Here's a screenshot of an ASP.NET Core app using Auth0 for authentication: [![APEX and Auth0 A Seamless Single Sign-On Integration](https://content.dsp.co.uk/hs-fs/hubfs/APEX%20and%20Auth0%20A%20Seamless%20Single%20Sign-On%20Integration%20Image%2013.jpg?width=831&height=250&name=APEX%20and%20Auth0%20A%20Seamless%20Single%20Sign-On%20Integration%20Image%2013.jpg)](https://content.dsp.co.uk/hubfs/APEX%20and%20Auth0%20A%20Seamless%20Single%20Sign-On%20Integration%20Image%2013.jpg)   And here's the Oracle APEX app, also integrated with Auth0: [![APEX and Auth0 A Seamless Single Sign-On Integration](https://content.dsp.co.uk/hs-fs/hubfs/APEX%20and%20Auth0%20A%20Seamless%20Single%20Sign-On%20Integration%20Image%2014.jpg?width=822&height=217&name=APEX%20and%20Auth0%20A%20Seamless%20Single%20Sign-On%20Integration%20Image%2014.jpg)](https://content.dsp.co.uk/hubfs/APEX%20and%20Auth0%20A%20Seamless%20Single%20Sign-On%20Integration%20Image%2014.jpg) By using Auth0 across your applications, regardless of the language or framework, your users benefit from the convenience of a single login that works seamlessly everywhere. This streamlines the user experience and simplifies security management across your organisation.   ## Conclusion In this blog post, we've explored how to integrate Auth0 with Oracle APEX, allowing you to manage authentication and user roles seamlessly. We walked through the setup process for creating applications in Auth0, configuring Oracle APEX to use Auth0 as the authentication provider, and mapping user roles from Auth0 to APEX authorisation schemes. By using a combination of Auth0's powerful identity management tools and Oracle APEX's flexible authorisation schemes, you can ensure secure, role-based access to your application. We also touched on how Auth0's versatility extends beyond Oracle APEX, allowing you to use it with other web applications, such as ASP.NET Core, ensuring that your users enjoy the convenience of a single login across multiple apps and platforms. Auth0's ability to centralise authentication across various technologies offers a significant advantage for both developers and users, streamlining security management and enhancing user experience. Whether you're working with low-code platforms like Oracle APEX or building full-stack apps in frameworks like ASP.NET Core, Auth0 provides a scalable solution for unified authentication and role management. If you haven't already, I encourage you to explore Auth0's features and see how it can simplify the authentication process for your own applications. For more information, check out our [Oracle APEX Services](https://www.dsp.co.uk/oracle-apex-services), and if you liked this blog, check out our other [APEX blogs here](https://content.dsp.co.uk/apex). Subscribe to [Oracle APEX Insights](https://www.dsp.co.uk/oracle-apex-insights) if you want to stay tuned for more APEX updates. [SSO](https://content.dsp.co.uk/topic/sso) [APEX](https://content.dsp.co.uk/topic/apex) [Oracle APEX](https://content.dsp.co.uk/topic/oracle-apex) [ASP.NET Core](https://content.dsp.co.uk/topic/asp-net-core) [Auth0](https://content.dsp.co.uk/topic/auth0) [19-Apr-2016 12:06:32 APEX Authentication and Authorisation for Forms Developers ](https://content.dsp.co.uk/apex-authentication-and-authorisation-for-forms-developers) [15-Feb-2023 14:35:23 Implement AWS Cognito Authentication in your APEX Application ](https://content.dsp.co.uk/implement-aws-cognito-authentication-in-your-apex-application) [19-Sep-2024 12:21:56 Implementing & Managing Certificates for APEX in OCI ](https://content.dsp.co.uk/implementing-managing-certificates-for-apex-in-oci) [Previous MySQL Enterprise Edition Licensing: A Comprehensive Guide ](https://content.dsp.co.uk/mysql-enterprise-edition-licensing-a-comprehensive-guide) [Next Oracle Critical Patch Update October 2024 ](https://content.dsp.co.uk/oracle-critical-patch-update-october-2024) #### Contact Sales Enquiries [+44 (0) 203 880 1686](tel:+4420%2038801686) Technical Support +44 (0) 330 058 8367 [enquiries@dsp.co.uk](mailto:enquiries@dsp.co.uk) #### Follow us #### Office Locations [**London (Head Office)**](https://www.google.com/maps/place/Fora+-+Chancery+House/@51.5174484,-0.1139686,198m/data=!3m2!1e3!5s0x48761adea956397d:0xb7585122cbe86fc0!4m6!3m5!1s0x48761b4b75bf77fb:0x97c4f0ad56af6d23!8m2!3d51.5174586!4d-0.1129066!16s%2Fg%2F11h_cy7xk5?entry=ttu&g_ep=EgoyMDI1MTAwOC4wIKXMDSoASAFQAw%3D%3D) [Chancery House](https://www.google.com/maps/place/Fora+-+Chancery+House/@51.5174484,-0.1139686,19z/data=!3m1!5s0x48761adea956397d:0xb7585122cbe86fc0!4m6!3m5!1s0x48761b4b75bf77fb:0x97c4f0ad56af6d23!8m2!3d51.5174586!4d-0.1129066!16s%2Fg%2F11h_cy7xk5?entry=ttu&g_ep=EgoyMDI1MDkyOS4wIKXMDSoASAFQAw%3D%3D) [53-64 Chancery Lane](https://www.google.com/maps/place/Fora+-+Chancery+House/@51.5174484,-0.1139686,19z/data=!3m1!5s0x48761adea956397d:0xb7585122cbe86fc0!4m6!3m5!1s0x48761b4b75bf77fb:0x97c4f0ad56af6d23!8m2!3d51.5174586!4d-0.1129066!16s%2Fg%2F11h_cy7xk5?entry=ttu&g_ep=EgoyMDI1MDkyOS4wIKXMDSoASAFQAw%3D%3D) [London](https://www.google.com/maps/place/Fora+-+Chancery+House/@51.5174484,-0.1139686,19z/data=!3m1!5s0x48761adea956397d:0xb7585122cbe86fc0!4m6!3m5!1s0x48761b4b75bf77fb:0x97c4f0ad56af6d23!8m2!3d51.5174586!4d-0.1129066!16s%2Fg%2F11h_cy7xk5?entry=ttu&g_ep=EgoyMDI1MDkyOS4wIKXMDSoASAFQAw%3D%3D) [WC2A 1QS](https://www.google.com/maps/place/Fora+-+Chancery+House/@51.5174484,-0.1139686,19z/data=!3m1!5s0x48761adea956397d:0xb7585122cbe86fc0!4m6!3m5!1s0x48761b4b75bf77fb:0x97c4f0ad56af6d23!8m2!3d51.5174586!4d-0.1129066!16s%2Fg%2F11h_cy7xk5?entry=ttu&g_ep=EgoyMDI1MDkyOS4wIKXMDSoASAFQAw%3D%3D) [**Leeds** Richmond House, Lawnswood Business Park, Leeds, LS16 6QY](https://www.google.com/maps/dir/53.8405223,-1.6062773/DSP-Explorer/@53.8404788,-1.6061783,17z/data=!4m9!4m8!1m1!4e1!1m5!1m1!1s0x4879591e5d204ac9:0x4e41b926d72adca!2m2!1d-1.6064847!2d53.8404842) [**Derby**](https://www.google.com/maps/place/Cubo+Pride+Park/@52.9142877,-1.4558952,331m/data=!3m2!1e3!5s0x4879f10728c1eea1:0x877f85530d38bf6!4m15!1m8!3m7!1s0x4879f1072b0e2ebb:0x7c717035ff049b12!2sPride+Pl,+Derby+DE24+8QR!3b1!8m2!3d52.913692!4d-1.4543743!16s%2Fg%2F1th7mf0r!3m5!1s0x4879f16809382b33:0x6fccc05b8500d970!8m2!3d52.914146!4d-1.4544105!16s%2Fg%2F11w4j8v8z2?entry=ttu&g_ep=EgoyMDI1MDYyMi4wIKXMDSoASAFQAw%3D%3D) [Cubo Pride Park,](https://www.google.com/maps/place/Cubo+Pride+Park/@52.9142877,-1.4558952,331m/data=!3m2!1e3!5s0x4879f10728c1eea1:0x877f85530d38bf6!4m15!1m8!3m7!1s0x4879f1072b0e2ebb:0x7c717035ff049b12!2sPride+Pl,+Derby+DE24+8QR!3b1!8m2!3d52.913692!4d-1.4543743!16s%2Fg%2F1th7mf0r!3m5!1s0x4879f16809382b33:0x6fccc05b8500d970!8m2!3d52.914146!4d-1.4544105!16s%2Fg%2F11w4j8v8z2?entry=ttu&g_ep=EgoyMDI1MDYyMi4wIKXMDSoASAFQAw%3D%3D) [1 Pride Place](https://www.google.com/maps/place/Cubo+Pride+Park/@52.9142877,-1.4558952,331m/data=!3m2!1e3!5s0x4879f10728c1eea1:0x877f85530d38bf6!4m15!1m8!3m7!1s0x4879f1072b0e2ebb:0x7c717035ff049b12!2sPride+Pl,+Derby+DE24+8QR!3b1!8m2!3d52.913692!4d-1.4543743!16s%2Fg%2F1th7mf0r!3m5!1s0x4879f16809382b33:0x6fccc05b8500d970!8m2!3d52.914146!4d-1.4544105!16s%2Fg%2F11w4j8v8z2?entry=ttu&g_ep=EgoyMDI1MDYyMi4wIKXMDSoASAFQAw%3D%3D) [Derby](https://www.google.com/maps/place/Cubo+Pride+Park/@52.9142877,-1.4558952,331m/data=!3m2!1e3!5s0x4879f10728c1eea1:0x877f85530d38bf6!4m15!1m8!3m7!1s0x4879f1072b0e2ebb:0x7c717035ff049b12!2sPride+Pl,+Derby+DE24+8QR!3b1!8m2!3d52.913692!4d-1.4543743!16s%2Fg%2F1th7mf0r!3m5!1s0x4879f16809382b33:0x6fccc05b8500d970!8m2!3d52.914146!4d-1.4544105!16s%2Fg%2F11w4j8v8z2?entry=ttu&g_ep=EgoyMDI1MDYyMi4wIKXMDSoASAFQAw%3D%3D) [DE24 8QR](https://www.google.com/maps/place/Cubo+Pride+Park/@52.9142877,-1.4558952,331m/data=!3m2!1e3!5s0x4879f10728c1eea1:0x877f85530d38bf6!4m15!1m8!3m7!1s0x4879f1072b0e2ebb:0x7c717035ff049b12!2sPride+Pl,+Derby+DE24+8QR!3b1!8m2!3d52.913692!4d-1.4543743!16s%2Fg%2F1th7mf0r!3m5!1s0x4879f16809382b33:0x6fccc05b8500d970!8m2!3d52.914146!4d-1.4544105!16s%2Fg%2F11w4j8v8z2?entry=ttu&g_ep=EgoyMDI1MDYyMi4wIKXMDSoASAFQAw%3D%3D) ** [Dublin](https://www.google.com/maps/search/Inniscarra,+Main+Street,+Rathcoole,+Dublin/@53.2810032,-6.4764674,17z/data=!3m1!4b1?entry=ttu)** [Inniscarra,](https://www.google.com/maps/search/Inniscarra,+Main+Street,+Rathcoole,+Dublin/@53.2810032,-6.4764674,17z/data=!3m1!4b1?entry=ttu) [Main Street,](https://www.google.com/maps/search/Inniscarra,+Main+Street,+Rathcoole,+Dublin/@53.2810032,-6.4764674,17z/data=!3m1!4b1?entry=ttu) [Rathcoole,](https://www.google.com/maps/search/Inniscarra,+Main+Street,+Rathcoole,+Dublin/@53.2810032,-6.4764674,17z/data=!3m1!4b1?entry=ttu) [Dublin](https://www.google.com/maps/search/Inniscarra,+Main+Street,+Rathcoole,+Dublin/@53.2810032,-6.4764674,17z/data=!3m1!4b1?entry=ttu) #### About Us DSP is a Data Management and Cloud Platform MSP that delivers enterprise grade support & consulting services for Oracle, Microsoft and Multi-Cloud technologies. ![Oracle Partner](https://content.dsp.co.uk/hubfs/logo-2021/Partner-logos/Oracle-logos/Colour/o-prtnr-cmyk-250.png) ![Microsoft Partner](https://content.dsp.co.uk/hubfs/Microsoft%20partner%20logos%20-%20July%202023/mic-sol-part-colour@200x.png) ![Google Cloud Partner](https://content.dsp.co.uk/hubfs/logo-2021/Partner-logos/GCP-Logos/Google-Cloud-Partner%20(1).svg) Registered Office: 30 City Road, London, EC1Y 2AB. Company Registration Number: 03898451 ```json { "@context" : "https://schema.org", "@type" : "BlogPosting", "dateModified" : "2024-10-01", "datePublished" : "2024-10-01", "headline" : "APEX and Auth0: A Seamless Single Sign-On Integration", "image" : [ "https://www.dsp.co.uk/hubfs/APEX%20and%20Auth0%20A%20Seamless%20Single%20Sign-On%20Integration%20Image%201.jpg" ], "mainEntityOfPage" : { "@id" : "https://content.dsp.co.uk/apex-and-auth0-a-seamless-single-sign-on-integration", "@type" : "WebPage" } } ```