> For the complete documentation index, see [llms.txt](https://docs.statuspal.io/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.statuspal.io/security/single-sign-on/configure-role-provisioning-for-auth0.md).

# Configure role provisioning for Auth0

Once you have your StatusPal SSO configured with Auth0, follow the steps below to start sending the `groups` attribute via SAML

1. Go to your Auth0 dashboard, select your application, and open the **SAML2 Web App** addon.
2. Add the following to your Settings JSON<br>

   ```
   "mappings": {
     "groups": "http://schemas.xmlsoap.org/claims/groups"
   },
   ```

The updated Settings section should look like this:

<figure><img src="/files/HxJIMVB7FaqP0V8TL2Ou" alt=""><figcaption></figcaption></figure>

3. Within your Auth0 dashboard, head over to **Extensions**
4. In the Auth0 dashboard, go to **Extensions**, and install the **Auth0 Authorization** extension if you haven’t already. This will add an "Authorization" link to your left sidebar.

<figure><img src="/files/sEs2aftLOZkodeB2tzZn" alt=""><figcaption></figcaption></figure>

5. Click the **Authorization** link in the sidebar, then go to the **Groups** section.

<figure><img src="/files/5vIEEfFcfraTe2DbNpmX" alt=""><figcaption></figcaption></figure>

7. Create your groups and add members as needed.

Now, we should receive the `groups` attribute from Auth0, containing the groups that are assigned to the user signing in.

{% hint style="warning" %}
What's left to enable role provisioning is to configure the SSO settings in StatusPal. Follow this guide for that [Configure Role provisioning from SAML attributes](/security/single-sign-on/configure-role-provisioning-from-saml-attributes.md#configure-your-sso-role-mappings-in-statuspal)
{% endhint %}