Skip to main content
AccessOwl integrates with Auth0 to provision and deprovision user access in your Auth0 Team, which controls who can access your tenants in the Auth0 Dashboard.
The Auth0 integration requires Auth0 Teams. Teams is on by default for self-service accounts created since November 1, 2023. Older self-service accounts get Teams by upgrading to the latest plan version in the tenant’s subscription settings, and Enterprise customers can ask Auth0 to onboard them into Teams. You can still add Auth0 to AccessOwl without the integration, and access requests go to the Application Admin to complete in Auth0.

​
Capabilities

Provisioning

AccessOwl creates user accounts with the specified roles/permissions during access requests.

Deprovisioning

AccessOwl removes members from your Auth0 Team during access revocations.

​
Prerequisites

  • Auth0 Teams enabled for your Auth0 account.
  • Team Owner access in Auth0 Teams, so you can invite the integration account.
  • On a Public Cloud Enterprise account, Manage tenant members turned on under Settings in the Teams dashboard. Auth0 requires it to remove team members.

​
Setup

1

Add Auth0 in AccessOwl

Either add a new application or open Applications and click the +-symbol, then continue.
2

Invite the integration account as Team Owner

AccessOwl shows you the integration account’s email address. In Auth0:
  • Open the Teams dashboard at https://accounts.auth0.com/, or select your tenant name from the tenant drop-down menu in the Auth0 Dashboard and select Go to team.
  • Select Members.
  • Select Invite a Member.
  • Enter the integration account’s email address and select Team Owner as the access level.
  • Select Send Invite.
The integration account needs the Team Owner role because only Team Owners can invite members to an Auth0 Team and remove team members. Removing a team member also removes their access to every tenant in the team.
Last modified on October 19, 2026