# Auth0 (Pro)

DefectDojo Pro supports login via Auth0. Open-source DefectDojo does not include SSO — see [Authorized Users](https://docs.defectdojo.com/admin/user_management/os__authorized_users/) for open-source access control.

## Prerequisites

Complete the following steps in your Auth0 dashboard before configuring DefectDojo:

1. Create a new application: **Applications > Create Application > Single Page Web Application**.

2. Configure the application:

- **Name:** `DefectDojo`
   - **Allowed Callback URLs:** `https://your-instance.cloud.defectdojo.com/complete/auth0/`

3. Note the following values — you will need them in DefectDojo:

- **Domain**
   - **Client ID**
   - **Client Secret**

## Configuration

In DefectDojo, go to **Enterprise Settings > OAuth Settings**, select **Auth0**, and fill in the form:

- **Auth0 OAuth Key** — enter your **Client ID**
- **Auth0 OAuth Secret** — enter your **Client Secret**
- **Auth0 Domain** — enter your **Domain**

Check **Enable Auth0 OAuth** to add a **Login With Auth0** button to the DefectDojo login page.