Set up SAML SSO with Auth0

Learn how to set up enterprise connections in Hanko for customers using Auth0 as SAML identity provider.

Hanko Auth0 SAML Integration Guide:

About Hanko:

Hanko is a modern open source authentication solution and the fastest way you integrate passkeys, 2FA, SSO, and more—with full control over your data. Move between self-hosted and Hanko Cloud anytime. No lock-in. Just Auth how it should be: secure, user friendly, and fully yours.

What This Guide Covers: This guide demonstrates how to configure Auth0 as a SAML identity provider for your Hanko project, enabling secure single sign-on authentication for enterprise users.

Key Technologies:

• SAML 2.0
• XML digital signatures
• Auth0 identity provider
• SAML assertions

Prerequisites:

• Active Auth0 account
• Hanko Cloud project
• Basic understanding of SAML authentication protocols
• Admin access to both Auth0 and Hanko Cloud dashboards

Tasks You’ll Complete:

• Set up SAML application in Auth0 dashboard
• Configure SAML addon with proper ACS URL and settings
• Set up attribute mapping for email claims
• Create enterprise connection in Hanko Cloud
• Test integration using IdP-initiated flow
• Verify authentication workflow functions properly

Prerequisites

You need your project’s SAML Assertion Consumer Service (ACS) URL.

Service Provider ACS URL

To find the Assertion Consumer Service (ACS) URL for your project:

1. Log in to Hanko Cloud and select your project.
2. Navigate to Settings > Enterprise connections.
3. Under Enterprise connections find the Redirect URL panel.
4. Copy and save the URL.

Create an Auth0 application

1. Sign up for an Auth0 account or sign in to access your dashboard.
2. On your dashboard, select Applications > Applications in the left sidebar.
3. Click Create application to create an application.

4. In the shown modal, enter a name for your application.
5. Select Regular Web Applications as the application type.
6. Click Create to create the application. You should be redirected to the application’s dashboard.

7. On the application’s dashboard, select Addons in the top tab navigation.
8. Click on the SAML2 Web App panel.

9. In the shown modal, select Settings in the top tab navigation.
10. In the Application Callback URL input provide the ACS URL you obtained as described in Prerequisites - Service Provider ACS URL.

11. Scroll down and select Enable to enable the configured SAML addon.

12. Select the Usage tab in the top tab navigation.
13. Find Identity Provider Metadata and copy the address of Download link. You need this for configuring the enterprise connection with Hanko in the next section.

Attribute mapping

SAML SSO integration with Hanko requires an email address attribute in the IdP’s SAML response. The attribute must be available under the name http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress. Auth0 uses this name by default for the emailaddress attribute, so no additional configuration is required.

Configure an enterprise connection

1. Log in to Hanko Cloud and select your project.
2. Navigate to Settings > Enterprise connections.
3. Under Connections, click New connection.

4. In the shown modal provide the following data:
   • A Name for the connection.
   • A Domain for the connection. When users authenticate via SAML SSO, the domain of the email address provided as an identifier at the start of an authentication flow must match the domain configured here.
   • A Metadata URL. This is the URL you copied in step 13 in Create an Auth0 application.
   • Select whether you want skip email verification for this provider.
5. Click Save to create the connection.

Testing your integration

To test your integration via IdP-initiated flow:

1. Navigate to the SAML Addon configuration for your application (see step 8 in Create an Auth0 application).
2. In the Usage tab, find the Identity Provider Login URL and click the link.