Auth0 is a cloud-based Identity-as-a-Service platform that lets you integrate advanced authentication and authorization mechanics into your applications.

Sumsub and Auth0 integration enables automated KYC/AML flows during employee registration, login, or password recovery, allowing you to check employee identity before granting them permissions and access to your product.

By connecting authentication events with verification workflows, organizations can verify employees before granting access, strengthen security, and reduce fraud without building custom logic.

Solution benefits

Key benefits of Sumsub’s Auth0 integration include the following:

• Identity assurance within Auth0 — use real-time identity verification to make more reliable login and access decisions.
• Reduced account takeover risk — protect against fraud at both registration and password reset, the two highest-risk moments in the login flow.
• Seamless user experience — trigger full verification only when risk requires it, keeping routine logins frictionless.
• Faster time-to-value — go live in days via a prebuilt marketplace integration instead of a custom build.
• Lower engineering overhead — focus on product, not on building or maintaining verification infrastructure.

How Sumsub’s Auth0 integration works

Auth0 Integration adds identity verification to your employees' authentication workflows.

Verification can be applied during key moments such as:

• New employee onboarding
• Login attempts
• Password resets
• Account recovery
• High-risk employee actions

When one of these events occurs, Auth0 triggers the configured Sumsub verification workflow. After the employee completes verification, the result is returned to Auth0 and can be used to determine whether the requested action should be allowed.

Verification flow

1. Employee initiates an authentication request.
2. Auth0 triggers the configured Sumsub verification workflow.
3. Sumsub guides the employee through the identity verification process and evaluates the verification results.
4. Sumsub returns the verification outcome to Auth0.
5. Auth0 grants or denies access based on the verification outcome.

Use cases

The Auth0 integration supports the following common use cases:

• Full Identity Verification on first login — verify employees during registration, including document verification, biometric checks (Liveness, Face match), and other Sumsub verification methods.
• Login verification — trigger identity verification during login.
• Account recovery — verify employees before restoring account access.
• Fraud prevention — reduce fraud during authentication events.

Setup requirements

Before implementing the integration, make sure you have:

• Auth0 tenant — an active tenant with administrative access.
• Sumsub account — an active account with API credentials and a configured verification workflow.
• Webhook configuration — webhooks configured to receive verification events.

Enable Sumsub’s Auth0 integration

To enable Auth0 integration, you need to create an Auth0 account and a Sumsub account with API access and do the following:

Obtain Sumsub token and secret key

To get a Sumsub token and secret key:

1. Generate a new access token, as described in this article. Once the token is created, the dedicated secret key will be generated automatically.
2. Open your Sumsub Dashboard, navigate to the Dev Space → App tokens, and copy both the token and the key.

Configure KYC verification level

To configure a verification level:

1. Navigate to Individuals → Levels.
2. Copy the name of the level you want to use for verification with Auth0. This level name will be used in the integration configuration.

Add and configure integration

1. Open https://auth0.com/.
2. Log in using your Auth0 account.
3. Navigate to the Marketplace, find Sumsub, and click Add integration.
4. Configure the integration by filling in the dedicated fields with the data you obtained before:
   • Sumsub App Token
   • Sumsub Secret Key
   • Sumsub Level Name
5. Select Create to add the integration to your library.
6. In the modal dialog that appears, select the Add to flow link. The Action will be automatically added to your login flow.
7. Select Apply Changes.
8. Open Applications and select your application.
9. Copy the following values required for the client-side deployment:
   1. Client ID
   2. Domain
10. Deploy the client application.
11. Configure the application URLs using your application URL instead of the demo URL.
12. Verify that the following settings are configured correctly:
    1. Allowed Origins (CORS)
    2. Allowed Callback URLs
    3. Allowed Logout URLs
    4. Web Origins

For more details on each step, refer to the Auth0 installation instructions.

Sumsub's Auth0 integration FAQ

Find the most frequently asked questions about Sumsub's Auth0 integration.