> ## Documentation Index
> Fetch the complete documentation index at: https://docs.accessowl.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Auth0

AccessOwl integrates with Auth0 to provision and deprovision user access in your Auth0 Team, which controls who can access your tenants in the Auth0 Dashboard.

<Warning>
  The Auth0 integration requires Auth0 Teams. Teams is on by default for self-service accounts created since November 1, 2023. Older self-service accounts get Teams by upgrading to the latest plan version in the tenant's subscription settings, and Enterprise customers can ask Auth0 to onboard them into Teams. You can still add Auth0 to AccessOwl without the integration, and access requests go to the [Application Admin](/guides/applications/admins-owners) to complete in Auth0.
</Warning>

## Capabilities

<CardGroup cols={2}>
  <Card title="Provisioning" icon="user-plus">
    AccessOwl creates user accounts with the specified roles/permissions during access requests.
  </Card>

  <Card title="Deprovisioning" icon="user-minus">
    AccessOwl removes members from your Auth0 Team during access revocations.
  </Card>
</CardGroup>

## Prerequisites

* Auth0 Teams enabled for your Auth0 account.
* **Team Owner** access in Auth0 Teams, so you can invite the integration account.
* On a Public Cloud Enterprise account, **Manage tenant members** turned on under **Settings** in the Teams dashboard. Auth0 requires it to remove team members.

## Setup

<Steps>
  <Step title="Add Auth0 in AccessOwl">
    Either add a new application or open Applications and click the +-symbol, then continue.
  </Step>

  <Step title="Invite the integration account as Team Owner">
    AccessOwl shows you the integration account's email address. In Auth0:

    * Open the Teams dashboard at `https://accounts.auth0.com/`, or select your tenant name from the tenant drop-down menu in the Auth0 Dashboard and select **Go to team**.
    * Select **Members**.
    * Select **Invite a Member**.
    * Enter the integration account's email address and select **Team Owner** as the access level.
    * Select **Send Invite**.

    <Note>
      The integration account needs the Team Owner role because only Team Owners can invite members to an Auth0 Team and remove team members. Removing a team member also removes their access to every tenant in the team.
    </Note>
  </Step>
</Steps>


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.