BookYourPTO
Features

Auth0 SSO Integration

Learn how to configure Auth0 Single Sign-On (SSO) in BookYourPTO, including application setup, credentials, and authentication settings.

What Is Auth0 SSO?

Auth0 Single Sign-On (SSO) allows users to securely log in to BookYourPTO using external identity providers such as:

  • Google
  • Microsoft
  • GitHub

Instead of managing passwords separately, authentication is handled through a centralized identity provider.

Auth0 authentication is available only on Pro and Enterprise plans.

Before You Begin

Ensure you have:

  • Admin or Executive access in BookYourPTO
  • An active Auth0 account (tenant access)

Creating an Auth0 Application

  1. Log in to the Auth0 Dashboard.
  2. Navigate to: Applications → Create Application
  3. Configure the application:
    • Name — e.g., BookYourPTO SSO
    • Application Type — Regular Web Application
  4. Click Create.

Configuring Auth0 Settings

  1. Open your application: Auth0 Dashboard → Applications → Your App → Settings
  2. Copy the following credentials:
    • Domain
    • Client ID
    • Client Secret
  3. Navigate to: BookYourPTO → Settings → Auth0 Integration
  4. Paste the credentials into the corresponding fields.

Configuring Application URIs

In the Auth0 application settings, scroll to Application URIs and configure:

Allowed Callback URLs

https://app.bookyourpto.com/auth/callback

Allowed Logout URLs

https://app.bookyourpto.com
Add additional URLs for staging or development environments if required.
  1. Click Save Changes.

Enabling Social Login (Optional)

To allow users to sign in with third-party providers:

  1. Navigate to: Auth0 Dashboard → Authentication → Social
  2. Enable desired providers:
    • Google
    • Microsoft
    • GitHub
  3. Complete provider setup:
ProviderSetup Location
GoogleGoogle Cloud Console
MicrosoftAzure Portal / Entra ID
GitHubGitHub Developer Settings
  1. Save configuration.
Enabled providers will automatically appear on the Auth0 login screen.

Configuring BookYourPTO

Navigate to: BookYourPTO → Settings → Auth0 Integration

Enable Auth0

  • Toggle Auth0 Authentication ON

Enter Credentials

Provide the following:

  • Domain
  • Client ID
  • Client Secret

User Provisioning

Control how users are created during login:

OptionBehavior
Auto-Create UsersNew users are created automatically on first login
Manual ProvisioningOnly existing users can log in

Allowed Email Domains

Restrict access to specific organizations:

  • Enter comma-separated domains: anhourtec.com, yourcompanyname.com
  • Only users with matching email domains are allowed access.

Authentication Modes

Define how users can log in:

ModeDescription
Hybrid ModeUsers can log in via Auth0 or email/password
SSO-Only ModeUsers must log in using Auth0 only
SSO-Only mode is typically used for organizations with centralized identity management.

Notes

  • Configuration changes apply immediately after saving
  • Incorrect credentials or URLs may cause login failures
  • Access and authentication behavior depend on configured settings and user roles

Expense Settings

The Expense Management section allows administrators to configure reimbursement settings, expense categories, per diem rates, mileage rates, receipt requirements, and approval policies for the organization.

Password & Authentication Policy

Learn how to configure password rules and authentication controls to secure access across your organization.