Skip to content

First UAP update#81

Closed
avanscoy wants to merge 15 commits into
mainfrom
docs-5080-uap-updates
Closed

First UAP update#81
avanscoy wants to merge 15 commits into
mainfrom
docs-5080-uap-updates

Conversation

@avanscoy
Copy link
Copy Markdown
Contributor

By submitting a PR to this repository, you agree to the terms within the Auth0 Code of Conduct. Please see the contributing guidelines for how to create and submit a high-quality PR for this repo.

Description

Describe the purpose of this PR along with any background information and the impacts of the proposed change. For the benefit of the community, please do not assume prior context.

Provide details that support your chosen implementation, including: breaking changes, alternatives considered, changes to the API, etc.

If the UI is being changed, please provide screenshots.

References

Include any links supporting this change such as a:

  • GitHub Issue/PR number addressed or fixed
  • Auth0 Community post
  • StackOverflow post
  • Support forum thread
  • Related pull requests/issues from other repos

If there are no references, simply delete this section.

Testing

Describe how this can be tested by reviewers. Be specific about anything not tested and reasons why. If this library has unit and/or integration testing, tests should be added for new functionality and existing tests should complete without errors.

Please include any manual steps for testing end-to-end or functionality not covered by unit/integration tests.

Also include details of the environment this PR was developed in (language/platform/browser version).

  • This change adds test coverage for new/changed/fixed functionality

Checklist

  • I have added documentation for new/changed functionality in this PR or in auth0.com/docs
  • All active GitHub checks for tests, formatting, and security are passing
  • The correct base branch is being used, if not the default branch

@HVish HVish added the main-docs Changes related to auth0's main docs (https://auth0.com/docs) label Sep 29, 2025
Copy link
Copy Markdown
Contributor

@nick-gagliardi nick-gagliardi left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LG! Few minor suggestions

1. Select an existing UAP or creaete a new one. For a new UAP:
a. Add a name.
b. Review mappings to ensure the profile attributes are mapping to your preferred Auth0 attributes.
[UAP mapping Authentication > Enterprise > Self-Service](/main/images/cdy7uua7fh8z/Authenticate > Enterprise > Self-Service > UAP.png)
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Will this render?

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

From the deployment, it looks like it is, but I'll recheck it. Thanks for catching this!

* **Required**: When set to Required, customer admins must verify their domain when setting up SSO. They will not be able to enable their connection until verification is complete.
8. Under **Metadata**, add up to 10 metadata associated with the connection.
9. Review your access ticket configuration for accuracy. Then, select **Create Ticket**.
9. Under **Metadata**, add up to 10 metadata associated with the connection.
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

nit: 10 metadata items? Reads odd to me as-is, but feel free to ignore.

6. Review your access ticket configuration for accuracy. Then, select **Create Ticket**.
7. Under **Time to Live**, set an expiration period for the access ticket in seconds. By default, time to live is set to 432000 seconds (which equals five days).

A. Time to Live determines how long an access ticket URL is active **before** a customer admin launches the self-service assistant. It does not determine how long the customer admin has access to the assistant after it’s been launched. The expiration of the self-service assistant itself is 5 hours and cannot be configured.
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Should 5 be written as "five" according to style guide?

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

There's three instances in this doc! Good call.

avanscoy and others added 6 commits September 29, 2025 15:03
…/manage-self-service-sso.mdx

Co-authored-by: Nick Gagliardi <133918568+nick-gagliardi@users.noreply.github.com>
…/manage-self-service-sso.mdx

Co-authored-by: Nick Gagliardi <133918568+nick-gagliardi@users.noreply.github.com>
…/manage-self-service-sso.mdx

Co-authored-by: Nick Gagliardi <133918568+nick-gagliardi@users.noreply.github.com>
…/manage-self-service-sso.mdx

Co-authored-by: Nick Gagliardi <133918568+nick-gagliardi@users.noreply.github.com>
Comment thread main/docs/authenticate/enterprise-connections/self-service-SSO.mdx
Comment thread main/docs/authenticate/enterprise-connections/self-service-SSO.mdx
Copy link
Copy Markdown
Contributor

@BcnCarlos BcnCarlos left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Approve

@avanscoy avanscoy closed this Oct 1, 2025
@avanscoy
Copy link
Copy Markdown
Contributor Author

avanscoy commented Oct 1, 2025

Issues with GPG keys. Closing PR to start with a fresh one

@avanscoy avanscoy deleted the docs-5080-uap-updates branch October 1, 2025 15:52
lrzhou25 added a commit that referenced this pull request Apr 30, 2026
* feat: update MCP quickstart for On-Behalf-Of Token Exchange

Updates the "Call Your API on a User's Behalf" quickstart to reflect
the new On-Behalf-Of (OBO) Token Exchange implementation.

JavaScript changes (PR #79):
- Update sample folder: fastmcp-mcp-on-behalf-of-tokenexchange-js
- Replace Custom Token Exchange with On-Behalf-Of terminology
- Simplify environment variables (remove MCP_AUTH0_SUBJECT_TOKEN_TYPE)
- Update token exchange: exchangeTokenOnBehalfOf() using getTokenOnBehalfOf()
- Simplify MCP_AUTH0_EXCHANGE_SCOPE to "read:private"

Python changes (PR #81):
- Update sample folder: fastmcp-mcp-on-behalf-of-tokenexchange-python
- Replace Custom Token Exchange with On-Behalf-Of terminology
- Update token exchange: exchange_token_on_behalf_of() using get_token_on_behalf_of()

Additional improvements:
- Add rate limit note for Auth0 for AI Agents add-on
- Add client grant configuration instructions
- Add OBO token exchange enablement component
- Update prerequisites with OBO-specific requirements

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

* Edits

* Removed OBO token exchange prereq

* Addressed Patrick's feedback

* Final copyedits

* Copyedits

* Updated Callout

---------

Co-authored-by: Claude Opus 4.7 <noreply@anthropic.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

main-docs Changes related to auth0's main docs (https://auth0.com/docs)

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants