> For the complete documentation index, see [llms.txt](https://docs.statuspal.io/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.statuspal.io/security/single-sign-on/configure-role-provisioning-for-auth0.md).

# Configure role provisioning for Auth0

Configure Auth0 to send the "groups" attribute to enable role provisioning in your StatusPal status page.

Once you have your StatusPal SSO configured with Auth0, follow the steps below to start sending the `groups` attribute via SAML

1. Go to your Auth0 dashboard, select your application, and open the **SAML2 Web App** addon.
2. Add the following to your Settings JSON<br>

   ```
   "mappings": {
     "groups": "http://schemas.xmlsoap.org/claims/groups"
   },
   ```

The updated Settings section should look like this:

<figure><img src="https://4061983002-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FgIMm5p2V7PNx3dS7vwKE%2Fuploads%2FlHBP5Lge6qxKH747nDVo%2Frole-mapping-settings.png?alt=media&amp;token=1354807f-c2cd-4ec8-b324-1b27d41f7fae" alt=""><figcaption></figcaption></figure>

3. Within your Auth0 dashboard, head over to **Extensions**
4. In the Auth0 dashboard, go to **Extensions**, and install the **Auth0 Authorization** extension if you haven’t already. This will add an "Authorization" link to your left sidebar.

<figure><img src="https://4061983002-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FgIMm5p2V7PNx3dS7vwKE%2Fuploads%2FhW5H9hQ2taSPRcCQMSQK%2FScreen%20Shot%202025-07-21%20at%2016.08.30.png?alt=media&amp;token=292f34f7-0b33-4295-b90f-038643ba247a" alt=""><figcaption></figcaption></figure>

5. Click the **Authorization** link in the sidebar, then go to the **Groups** section.

<figure><img src="https://4061983002-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FgIMm5p2V7PNx3dS7vwKE%2Fuploads%2FUK1qO2cBWM0m3WwVX6xs%2FScreen%20Shot%202025-07-21%20at%2016.17.42.png?alt=media&amp;token=3091aa6a-860d-43ab-b0c5-4f7a2e703ab4" alt=""><figcaption></figcaption></figure>

7. Create your groups and add members as needed.

Now, we should receive the `groups` attribute from Auth0, containing the groups that are assigned to the user signing in.

{% hint style="warning" %}
What's left to enable role provisioning is to configure the SSO settings in StatusPal. Follow this guide for that [Configure Role provisioning from SAML attributes](/security/single-sign-on/configure-role-provisioning-from-saml-attributes.md#configure-your-sso-role-mappings-in-statuspal)
{% endhint %}