Auth0 Enterprise Connections — SAML, LDAP, and Active Directory

# saml_config.py
# SAML connection configuration

def saml_setup():
    print("SAML Connection Setup:")
    print()
    print("Prerequisites (from your IdP):")
    print("  - Single Sign-On URL")
    print("  - Entity ID / Issuer")
    print("  - X.509 Signing Certificate")
    print()
    print("In Auth0 Dashboard:")
    print("  1. Authentication > Enterprise > SAML")
    print("  2. Enter the IdP's SSO URL")
    print("  3. Enter the IdP's Entity ID")
    print("  4. Upload the IdP's signing certificate")
    print("  5. Configure mapping (IdP attributes to Auth0 fields)")
    print()
    print("Auth0 provides:")
    print("  - ACS URL (where IdP sends SAML response)")
    print("  - Entity ID for SP-initiated SSO")
    print("  - Audience Restriction")

saml_setup()

# ldap_ad.py
# LDAP and Active Directory configuration

def ldap_config():
    print("LDAP/AD Connection Setup:")
    print()
    print("Deployment options:")
    print("  - Auth0 Private Cloud (AD behind firewall)")
    print("  - AD via AD/LDAP Connector")
    print("  - Azure AD (cloud-based)")
    print()
    print("AD/LDAP Connector:")
    print("  - Windows service installed on your network")
    print("  - Connects Auth0 to on-premise AD")
    print("  - Supports secure LDAP (LDAPS)")
    print("  - Automatic failover and load balancing")
    print()
    print("Configuration in Auth0 Dashboard:")
    print("  1. Authentication > Enterprise > AD/LDAP")
    print("  2. Enter LDAP URL (ldaps://your-ad-server:636)")
    print("  3. Configure bind credentials")
    print("  4. Set search base and user query")
    print("  5. Map AD attributes to Auth0 fields")

ldap_config()

# azure_ad.py
# Azure AD integration

def azure_ad_setup():
    print("Azure AD Integration:")
    print()
    print("Prerequisites:")
    print("  - Azure AD tenant (work/school account)")
    print("  - Global admin permissions")
    print()
    print("In Azure Portal:")
    print("  1. Go to Azure Active Directory > Enterprise Applications")
    print("  2. Create a new application from 'Non-gallery'")
    print("  3. Set up SAML-based Sign-On")
    print("  4. Download the Federation Metadata XML")
    print()
    print("In Auth0 Dashboard:")
    print("  1. Authentication > Enterprise > Azure AD")
    print("  2. Upload Federation Metadata XML")
    print("  3. Or configure manually (Entity ID, SSO URL, cert)")
    print("  4. Configure attribute mapping")
    print()
    print("Test by signing in with an Azure AD user")

azure_ad_setup()

# jit_provisioning.py
# Just-In-Time user provisioning

def jit_provisioning():
    print("Just-In-Time (JIT) Provisioning:")
    print()
    print("What it does:")
    print("  Creates a user profile in Auth0 when an")
    print("  enterprise user signs in for the first time.")
    print()
    print("JIT Configuration:")
    print("  - Enabled per enterprise connection")
    print("  - Maps IdP attributes to Auth0 user fields")
    print("  - Assigns default roles/groups")
    print("  - Can run a custom Action for complex logic")
    print()
    print("Example mapping:")
    print("  SAML email → Auth0 email")
    print("  SAML givenName → Auth0 given_name")
    print("  SAML memberOf → Auth0 app_metadata.roles")
    print()
    print("Benefits:")
    print("  - No need to pre-create user accounts")
    print("  - User data is always up to date")
    print("  - Seamless onboarding for new employees")

jit_provisioning()

def enterprise_sso_plan():
    print("Enterprise SSO Configuration Plan:")
    print()
    print("Supported connections:")
    print("  1. SAML 2.0 (generic IdP)")
    print("  2. Azure AD")
    print("  3. Okta")
    print("  4. AD/LDAP (on-premise via Connector)")
    print()
    print("JIT provisioning: Enabled")
    print("  email → auth0.users.email")
    print("  givenName → auth0.users.given_name")
    print("  memberOf → auth0.users.app_metadata.roles")
    print()
    print("Role mapping:")
    print("  group:admin → role:admin")
    print("  group:user → role:user")

enterprise_sso_plan()