Deploy CLI Tool
Auth0 supports continuous integration and deployment (CI/CD) of Auth0 tenants and integration into existing CI/CD pipelines using the Deploy CLI tool.
The Deploy CLI tool (auth0-deploy-cli) supports two methods to import and export the following Auth0 tenant configuration objects:
Actions
Clients (Applications)
Client Grants
Connections
Grants
Hooks
Hook Secrets
Organizations
Resource Servers (APIs)
Roles
Rules
Rules Configs
Email Templates and providers
Guardian
Tenants settings (including Pages and Migrations)
You can export the data to a predefined directory structure or a YAML configuration file. You can call the tool programmatically. You can also use the tool to replace environment variables.
Upgrade to version 7
For version 7, the auth0-deploy-cli tool adds support for Organizations and Actions, and drops support for Node.js version 8.
Upgrading to Deploy CLI Tool v7
Upgrading to Deploy CLI Tool v7 from v5 requires that the auth0-deploy-cli application be granted the following additional permissions (scopes) for the Auth0 Management API:
create:actionsread:actionsupdate:actionsdelete:actionsread:organizationsupdate:organizationscreate:organizationsdelete:organizationscreate:organization_connectionsread:organization_connectionsupdate:organization_connectionsdelete:organization_connectionsread:attack_protectionupdate:attack_protection
To learn how to modify the required scopes, read Create and Configure the Deploy CLI Application.
Previous versions
Features released in previous versions of the Deploy CLI Tool are listed below. For a complete list of changes, see the GitHub changelog.
Deploy CLI Tool v4
For version 4, the auth0-deploy-cli tool was updated to add support for Hooks and Hook Secrets.
Upgrading to Deploy CLI Tool v4
Upgrading to Deploy CLI Tool v4 requires that the auth0-deploy-cli application be granted the following additional permissions (scopes) for the Auth0 Management API:
create:hooksread:hooksupdate:hooksdelete:hooks
To learn how to modify the required scopes, read Create and Configure the Deploy CLI Application.
Deploy CLI Tool v3
For version 3, the auth0-deploy-cli tool was updated to include the following changes.
Added options to the config:
INCLUDED_PROPS: Enables export of properties that are excluded by default (e.g., client_secret)
EXCLUDED_PROPS: Provides ability to exclude any unwanted properties from exported objects
Removed
--stripoption fromexportcommand. IDs will now be stripped by default; to override, use--export_idsorAUTH0_EXPORT_IDENTIFIERS: true.
Deploy CLI Tool v2
For version 2, the auth0-deploy-cli tool was updated to include the following changes.
Added YAML support
Added support for export (deprecation of separate auth0 dump tool)
Delete support - The tool will, if configured via
AUTH0_ALLOW_DELETE, delete objects if does not exist within the deploy configuration.Support for additional Auth0 objects
Connections including Social, Enterprise and Passwordless configurations.
Improved support for database connections and associated configuration.
Email Templates
Email Provider
Client Grants
Rule Configs (Import Only)
Guardian config
Better support for pages
Tenant level settings
Added support to be called programmatically
Improved logging
To simplify the tool the slack hook was removed. You can invoke the tool programmatically to support calling your own hooks
Support referencing clients by their name vs client_id (automatic mapping during export/import)
Simplified to support future Auth0 object types