# Auth0 Log Streaming & Marketplace App

## Overview <a href="#overview" id="overview"></a>

The Oort identity security platform integrates with Auth0 tenants to collect user account information, sign-on, and application activity.

To enable near-real time analysis of user activity and events, Oort can leverage **Auth0 log streaming to an AWS EventBridge** streaming model. Then the Oort platform can capture the events in real-time.

<mark style="color:blue;">UPDATE:</mark>  The Oort log streaming functionality is now supported as an app in the Auth0 Marketplace.  This enables even faster setup and time to value of the Oort near-real time analysis capabilities.

For more information, please see the [Oort Identity Security app on the Auth0 Marketplace](https://marketplace.auth0.com/integrations/oort).&#x20;

### Prerequisites <a href="#prerequisites" id="prerequisites"></a>

You must already have an active Auth0 API-based integration configured in your Oort tenant setup. For more information, please see the [Auth0 Data Integration article](https://docs.oort.io/docs/auth0dataintegration).

## Auth0 Log Streaming Configuration <a href="#auth0-log-streaming-configuration" id="auth0-log-streaming-configuration"></a>

### Permission requirements <a href="#permission-requirements" id="permission-requirements"></a>

This document assumes that you have the **Admin** role, which is required to modify the Monitoring section configuration of your Auth0 tenant.

### Auth0 Setup Steps <a href="#setup-steps" id="setup-steps"></a>

These are the steps you need to go through to set up the Auth0 log streaming to Oort.

1. Navigate to the [Auth0 Marketplace entry for AWS EventBridge](https://marketplace.auth0.com/integrations/amazon-log-streaming) and add the integration.
2. Log in to your Auth0 Dashboard, if you have not already.
3. Navigate to **Monitoring -> Streams**
4. Click **+ Create Stream**
   1. Note - if you have reached the maximum number of streams for you Auth0 tenant, please contact Auth0 support to discuss options for adding additional streams.
5. Select Amazon EventBridge and enter a unique name for your new Amazon EventBridge Event Stream.
6. Create the AWS Event Source by providing your AWS Account ID and AWS Region.
   1. For Oort Production, the AWS Account ID is 988897525199
   2. For Oort Staging, the AWS Account ID is 909617834444
   3. If you are unsure which account ID to use, please open a support case
   4. All Oort environments are in AWS Region **US East (Ohio)**\
      \
      **Note -** this information can be viewed in your Oort tenant in step 1 [below](#oort-integration-steps).&#x20;

<figure><img src="https://582105988-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FqPSBzsjxd7KYg9DNVZ4l%2Fuploads%2FengpNcLY2pml3Ff2WZFI%2F2023-02-05_20-34-15.png?alt=media&#x26;token=36b31b4c-4144-40e2-860f-a2faddd4e0bc" alt=""><figcaption></figcaption></figure>

7. Click Save. Auth0 provides you with an Event Source Name. **Make sure to save your Event Source Name value.**
8. Complete the Oort steps below.&#x20;

### Oort Integration Steps

Within your Oort tenant where the existing Auth0 data connection resides, complete the following steps:

1. Navigate to Integrations -> Auth0 -> Edit Settings and click the Event Streaming tab\
   ![](https://582105988-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FqPSBzsjxd7KYg9DNVZ4l%2Fuploads%2FdBPTuRsR41ggCtFyiC17%2FAuth0%20Event%20streaming%201.png?alt=media\&token=ab6dedb4-76f6-448c-aede-8a4d41d5bb63)
2. Enter your **Event Source Name** from the Auth0 configuration above. &#x20;
3. Check the box to indicate that you've created the associated stream in Auth0.
4. Click **Save**.&#x20;
5. Oort will complete the remaining configuration for your Oort tenant and inform you once the log streaming is in place and functioning.

<figure><img src="https://oort-docs-site.netlify.app/static/c840009697d4dd4a567430b8d47c0ff3/a1253/2023-02-05_20-34-15.png" alt=""><figcaption></figcaption></figure>

<figure><img src="https://docs.oort.io/static/c840009697d4dd4a567430b8d47c0ff3/a1253/2023-02-05_20-34-15.png" alt=""><figcaption></figcaption></figure>