Auth0 SSO

With Adjust’s support for Auth0 SSO, you can use your Auth0 credentials to sign in to Adjust. 

Set up in Auth0

You can sign in to Adjust through Auth0 only if you have enabled SSO in your Auth0 account. To set up Auth0 SSO via SAML (Security Assertion Markup Language), follow these steps in the Auth0 admin console. 

1. Log in to your Auth0 admin account, and go to Dashboard > Applications.
2. Select Create Application.
3. In the Name field, enter Adjust App, select application type as Regular Web Applications, and select Create.
4. Now, go back to Dashboard > Applications.
5. Select the ... (three dots) menu, then select Settings next to the Adjust App.
6. Select Advanced settings.
7. On the Addons tab, turn on SAML 2.
8. In the SAML2 Web App window, on the Settings tab, set up the following, and select Enable:
   1. In the Application Callback URL field, enter https://api.adjust.com/accounts/users/saml/auth.
   2. In the Settings field, enter the following:

{
  "mappings": {
    "email": "primary_email",
    "given_name": "first_name",
    "family_name": "last_name"
  },
  "nameIdentifierProbes": [
    "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress"
  ]
}

1. In the SAML2 Web App window, select the Usage tab.
2. Select Download next to Identity Provider Metadata to download the SAML metadata XML file.

Great job! Your setup in Auth0 is done and you can move on to the next step.

Set up in Adjust

Adjust first enables SSO login for a single user account. Once you confirm that SSO login works for that user, Adjust enables SSO for all users on the domains that you provide. To complete setup for Auth0 SSO, follow these steps:

1. Send an email to your dedicated Account Manager or support@adjust.com with the following details to enable SSO for a single user in the account:

   • Identity Provider: Auth0
   • Domain(s): This is the domain used in your company email address. For example: if an employee email is john.doe@example.com, you need to enter example.com.  Adjust uses the domain to know which users should be converted to SSO users. To enter multiple email domains at once, separate them with a comma. For example: example.com, adjust.com. Once you have added a domain, it cannot be changed or deleted. 
   • Adjust user account: Provide the email address of a user who already has access to Adjust or your Adjust user account, for example, it-admin@example.com. If you want to test with your own user account, but do not have access to Adjust, ask an Adjust admin user on your team to create a user account for you. If required, you can remove your Adjust access after SSO setup is complete.
   • Default role: If you create an Adjust user account through Auth0, the user gets the default role permissions. The available options are Reader, Editor, or Admin. For more information, see our user permissions article.
   • SAML metadata XML file: Attach the SAML metadata XML file that you downloaded from Auth0.

2. After an Adjust representative confirms that they have enabled SSO for the account, follow these steps:

   1. Go to the Adjust login page.
   2. Select Log in with SSO.
   3. Enter the Auth0 email address that you provided to Adjust, and select Next.
   4. Sign in with Auth0.

3. Send an email to the Adjust representative to inform them that login via SSO for the first user was successful. Adjust will then enable SSO for all users in your account within 24-48 hours.

Sign in with SSO

There are two ways to sign in to Adjust as an SSO user.

From Auth0 - Available for all users, required for first-time users

1. Sign in to your Auth0 account.
2. Go to the Adjust app in Auth0’s applications.

You are sent to Adjust, signed in as the user associated with your Auth0 account.

Alternatively, users can log in to Adjust directly through the Identity Provider Login URL with their Auth0 credentials. To provide the Identity Provider Login URL to your users, follow these steps:

1. Log in to your Auth0 admin account, and go to Dashboard > Applications.
2. Select the Adjust app.
3. On the Addons tab, select SAML2 Web App.
4. On the Usage tab, copy the link next to Identity Provider Login URL.

From Adjust - Available for existing users

1. Go to the Adjust login page.
2. Select Log in with SSO.
3. Enter your Auth0 email address and select Next.
4. Sign in with Auth0.

After successfully signing in with your Auth0 account, you are redirected back to Adjust. You are now logged in as the user associated with your Auth0 account. 

Manage SSO users

• When a new user logs in to Adjust through Auth0 for the first time, Adjust creates their account with the default role permissions. You can change the user's permissions.
• Users in your account will no longer be able to retrieve or reset API tokens from Adjust. Instead, reach out to your dedicated Account Manager or support@adjust.com.
• If your team has granted access to users on non-SSO domains (for example, if you work with advertising agencies), those users can still log in to Adjust directly.
• Once you integrate SSO, you need to manage two-factor authentication (2FA) through Auth0 for SSO users. Adjust will continue to manage 2FA for users on non-SSO domains, if you have enabled 2FA in Adjust.