---
title: "Enter the realm URL"
description: "We assume that you have an Auth0 account. If you don't have one, you can create a free account here."
stack: "Community Stack (open source) — version 0.21.0"
stack_version: "0.21.0"
stack_comparison: https://docs.walt.id/community-vs-enterprise.md
canonical_url: https://docs.walt.id/community-stack/wallet/authentication/jwt-oidc/auth0/configuration
generated: 2026-07-20
---
## Auth0 Account

We assume that you have an Auth0 account. If you don't have one, you can create a free
account [here](https://auth0.com/signup).

## Auth0 Configuration

To integrate Auth0 with the Wallet API, you need to configure the Auth0 application and the Wallet API. The following
steps guide you through the configuration process.

### Step 1: Create an Auth0 Application

1. Log in to your Auth0 account.
2. Click on the **Applications** tab.
3. Click on the **Create Application** button.
4. Select the **Regular Web Application** option.
5. Enter a name for your application.
6. Click on the **Create** button.
7. In the **Settings** tab, configure the following settings:

    - **Allowed Web Origins**: Enter the URL of your application. For example, `https://wallet.demo.walt.id`.
    - **Allowed Callback URLs**: Enter the callback URL of your application. For
      example, `https://wallet.demo.walt.id/wallet-api/auth/oidc-session`.
    - **Allowed Logout URLs**: Enter the logout URL of your application. For example, `https://wallet.demo.walt.id/logout`.
    - **Allowed Origins (CORS)**: Enter the URL of your application. For example, `https://wallet.demo.walt.id`.

### Step 2: Configure the Wallet API

In the Wallet API, you need to configure the Auth0 settings in the `oidc.conf` file.

```json [oidc.conf]

enableOidcLogin = true
providerName = auth0
# Enter the realm URL
oidcRealm = "https://dev-rv0r7nb07450ieht.us.auth0.com/"
# JWKS (to verify access keys the user claims to received through OIDC server)
oidcJwks = "{{oidcRealm}}/.well-known/jwks.json"
oidcScopes = ["openid",
              "profile",
              "offline_access",
              "name",
              "given_name",
              "family_name",
              "nickname",
              "email",
              "email_verified",
              "picture",
              "created_at",
              "identities",
              "phone",
              "address","read:user_idp_tokens"]

authorizeUrl = "{{oidcRealm}}/authorize"
accessTokenUrl = "{{oidcRealm}}/oauth/token"
logoutUrl = "{{oidcRealm}}/oidc/logout"

clientId = "j5QFcCKd4iX9uTKudVnjqrtBaNaG2hHJ"
clientSecret = "GtuJ38HEcjjMjm8iC5CNGN8w1F_RDrn-OngT2JpXpub9M-SBgyXCkBbeTSqdRm6u"
audience = "{{oidcRealm}}/api/v2/"
# Keycloak authentication strategy
keycloakUserApi = ""
userEndpoint = "{{oidcRealm}}/userinfo"
# JWKS is cached:
jwksCache = {
    cacheSize = 10
    cacheExpirationHours = 24
    rateLimit: {
        bucketSize: 10
        refillRateMinutes: 1
    }
}
```