Before you start
You'll need:
An Auth0 tenant with permissions to create and configure applications and SAML integrations.
Access to Atlas with permission to configure single sign-on (SSO).
The Atlas SSO configuration page open in a separate browser tab; you'll be copying values between the two.
Step 1: Set up a SAML app in Auth0
Sign in to Auth0
Go to your Auth0 dashboard and sign in with an account that has permission to manage applications.
Create an application for Atlas
In the left navigation, go to Applications → Applications.
Create a new application for Atlas (or open an existing one). Give it a clear name, such as Atlas SAML SSO.
Select Regular Web Application as the application type (or the type recommended by your Auth0 administrator).
Save the application.
Enable the SAML2 Web App Addon
Open the Atlas application you just created.
Go to the Addons tab and enable SAML2 Web App.
Open the SAML2 Web App configuration dialogue.
Configure SAML settings using your Atlas values
In the Settings tab for the addon, find the SAML configuration fields.
Set the audience / entityId to the Atlas Audience or Entity ID from the Atlas wizard.
Set the callback URL (Assertion Consumer Service URL) to the Atlas SSO URL from the Atlas wizard.
If there is a Recipient or Destination field, use the same Atlas SSO URL.
Save the SAML2 web app configuration.
Important: Always use the exact values from your Atlas environment, not example values from other documentation.
Configure user attributes (if required)
In the addon Settings, review the mappings section.
Make sure the SAML assertion includes attributes for:
E-mail address.
First name.
Last name.
Use consistent attribute names, such as e-mail, given_name, and family_name. You'll map these in Atlas later.
Save the configuration.
Download your certificate and metadata
In the SAML2 web app configuration or the addons summary, find the identity provider metadata or SAML metadata download link.
Download the metadata XML file or copy the relevant identity provider URLs and certificate.
Keep these handy; you'll paste them into Atlas shortly.
Step 2: Add users in Auth0 and Atlas
Add users in Auth0
In the Auth0 dashboard, go to User Management → Users and create or confirm the accounts for users who will sign in to Atlas.
Make sure these users are allowed to authenticate through the Atlas application in Auth0.
Add the same users in Atlas
In Atlas, open the user management area.
Create or confirm accounts for the same users, making sure their e-mail addresses match exactly what's in Auth0.
Note: User identifiers must match between Auth0 and Atlas for SSO to work correctly.
Step 3: Configure single sign-on in Atlas
Open the SSO configuration page in Atlas and follow the wizard.
Name and protocol
Enter a Configuration name: for example, Auth0 single sign-on.
Select SAML 2.0 as the protocol.
Atlas SSO endpoints
In the Atlas SSO endpoints step, review the values shown (SSO URL and Audience or Entity ID).
Confirm these match the callback URL and audience/entityId you set in Auth0.
Auth0 identity provider details
In the relevant step of the Atlas wizard, paste the Auth0 details you collected earlier:
Identity provider metadata (or SAML metadata URL / XML).
Certificate.
Sign-in URL (and logout URL if applicable).
Save the configuration step.
Map user attributes
In the attribute mapping steps, connect Auth0 attributes to Atlas user fields:
E-mail address → Atlas e-mail field.
First name → Atlas first name field.
Last name → Atlas last name field.
Phone number: optional, can be skipped.
Confirm all required mappings are complete and save without errors.
Step 4: Test the connection
In Atlas, select Test connection on the SSO configuration page.
Atlas will redirect you to the Auth0-hosted login page for your tenant.
You've set things up correctly if:
You're redirected to your Auth0 login page.
You can sign in with a user who has access to the Atlas application in Auth0.
After signing in, you're redirected back to Atlas.
Atlas shows a confirmation that the connection was successful.
Troubleshooting
If the connection test fails, check the following:
The audience/entityId and callback or ACS URL in Auth0 exactly match the values in the Atlas SSO endpoints step.
The user is allowed to authenticate to the Atlas application in Auth0 and exists in Atlas with a matching identifier.
The SAML attribute names for e-mail, first name, and last name in Auth0 match the mappings in Atlas.
Review any error messages in Atlas or in Auth0 logs (Monitoring → Logs) for further detail.
If you're still stuck, contact your internal administrator or reach out to Atlas support. Include a description of what you've tried and any error messages you've seen.