Version: 2.7

Integrate Auth0

Portworx Backup allows for the integration of Auth0 as an external authorization provider, enabling user authentication and role-based access control (RBAC) for either full or restricted access to the application's resources.

Prerequisite

An active user profile in Auth0.

To integrate Auth0 with Portworx Backup:

Login to Auth0 with valid and active user credentials.
From the home page, in the left navigation pane, go to Applications >> Applications.
Navigate to the required user profile.
On the Settings tab, make a note of Domain, Client ID and Client Secret.
Enter the Domain (Endpoint) Client ID, and Client Secret in Portworx Backup web console during installation to integrate Auth0 as external authorization provider. Refer install Portworx Backup section for more information on these fields.
After installing Portworx Backup (and integrating Auth0), login to Auth0 web console.
Navigate to Application > Settings> Application URL and enter Portworx Backup endpoint details and click Save:

Sample endpoint value:
```
http://<backup-endpoint>:<port-number>/auth/realms/master/broker/oidc/endpoint
```

Backup endpoint

Backup endpoint can be IP address of worker node or ingress URL for on-premises environments
For Azure it will be the external IP of the load balancer service
For GCP, IBM, and AWS, backup-endpoint is load balancer URL

Port Number

Is required only in case of on-premises cluster with worker node IP or node port (typically port of px-central-ui service in this case)

Related documentation:

Auth0 docs

Prerequisite​

Prerequisite