AD_HUB | The Auth0 endpoint to which the connector will connect. This value is maintained by the connector. | |
CA_CERT | An authority certificate or array of authority certificates to check the remote host against. | |
CLIENT_CERT_AUTH | Specifies if Client Certificate Authentication is enabled or not. This value is configured in Auth0 and maintained by the connector. | |
CONNECTION | The name of the connection in Auth0 which is linked to this instance of the connector. This value is maintained by the connector. | |
CONNECTIONS_API_V2_KEY | A Management API token used to call the Get a connection endpoint. Set this when you need to troubleshoot the connector. This compares the local certificate to the one configured in Auth0 and detects a possible mismatch. | |
FIREWALL_RULE_CREATED | Set to true once the Firewall rule has been created for the Kerberos Server (only when Kerberos is enabled). | |
GROUPS | Include the user’s groups when enriching the profile. | true |
GROUP_PROPERTY | The attribute of the group object used when adding the groups to a user. | cn |
GROUPS_CACHE_SECONDS | Total time in seconds to cache a user’s groups. | 600 seconds. |
GROUPS_TIMEOUT_SECONDS | The timeout in seconds for searching all groups a user belongs to. | 20 seconds |
HTTP_PROXY | The proxy server URL if one is required to connect from the AD/LDAP Connector to Auth0. | |
KERBEROS_AUTH | Set if Kerberos Authentication is enabled or not. This value is configured in Auth0 and maintained by the connector. | |
LAST_SENT_THUMBPRINT | Thumbprint of the last certificate which was sent to Auth0. | |
LDAP_BASE | Defines the location in the directory where the LDAP search begins. For example: DC=fabrikam,DC=local. | |
LDAP_BASE_GROUPS | Defines the location in the directory where the LDAP groups search begins. | |
LDAP_BIND_PASSWORD | The password of the LDAP user. This setting is automatically removed after the connector initializes. | |
LDAP_BIND_CREDENTIALS | The encrypted password of the LDAP user. This setting is automatically added after the connector initializes. | |
LDAP_BIND_USER | The user for binding a connection to LDAP. | |
LDAP_HEARTBEAT_SEARCH_QUERY | The LDAP search query used for heartbeat checks. | (&(objectclass=user)(|(sAMAccountName=foo)(UserPrincipalName=foo))) |
LDAP_HEARTBEAT_SECONDS | Time in seconds to keep the LDAP connection open. | |
LDAP_SEARCH_ALL_QUERY | The LDAP query used to list all users in the LDAP store. | (objectCategory=person) |
LDAP_SEARCH_GROUPS | The LDAP query used to find groups in the LDAP store. For example: (&(objectCategory=group)(member={0})) | (member:1.2.840.113556.1.4.1941:={0}) |
LDAP_SEARCH_QUERY | The LDAP query used to find users in the LDAP store. This query requires filters for the search to work correctly. If you do not configure filters, Auth0 does not send blocked account notification emails. | (&(objectCategory=person)(anr={0})) |
LDAP_USER_BY_NAME | The LDAP query used to find the user during authentication. This setting lets you specify which attribute is considered the user’s username. For example, like the common name: the sAMAccountName, UPN, et cetera. This setting also supports multiple values for an OR search, for example: (|(sAMAccountName={0})(userPrincipalName={0})) | (sAMAccountName={0}) |
LDAP_URL | The LDAP connection string. For example: ldap://fabrikam-dc.fabrikam.local. | |
PORT | The port the server runs on when Kerberos or Client Certificate Authentication is enabled. | |
PROVISIONING_TICKET | The Auth0 provisioning ticket used to communicate with Auth0. | |
REALM | The Auth0 realm, for example: urn:auth0:fabrikam. This value is maintained by the connector. | |
SERVER_URL | The default connector URL will be server-name:port, but this setting allows you to overwrite this. For example: connector.mycompany.com. | |
SESSION_SECRET | The session secret used to encrypt the session cookie. | |
SITE_NAME | Cuando la autenticación con certificado de cliente está habilitada, pero no puede realizarse, AD Connector mostrará una página de inicio de sesión alternativa. Esta configuración le permite especificar el título que se mostrará en la parte superior de la página. | Nombre de la conexión de AD. |
SSL_CA_PATH | Ruta absoluta del directorio base donde se encuentran los archivos de certificado de la CA. | |
SSL_KEY_PASSWORD | La contraseña del certificado SSL. | |
SSL_PFX | Certificado codificado en Base64 que se usará para SSL. | |
TENANT_SIGNING_KEY | La clave de firma de su inquilino de Auth0 que se utiliza para verificar JWT. | |
WSFED_ISSUER | El emisor que se establece en las respuestas de WS-Federation. Si una conexión está configurada con dominios de correo electrónico, el primer dominio de correo electrónico configurado en Auth0 se usará como emisor. | urn:auth0 |
Autenticar
Administrar usuarios
Personalizar
Auth0 AI
Plataforma