In Auth0, the "audience" generally refers to the intended recipient of an access token—the resource server that will validate and process the token. When dealing with the Auth0 Management API, you can locate its specific audience value within your Auth0 Dashboard.
Locating the Auth0 Management API Audience
The audience for the Auth0 Management API is represented by its unique Identifier. This value is crucial when you're requesting an access token that will allow your application to interact with Auth0's management functionalities.
Here's a step-by-step guide to finding it:
- Log in to your Auth0 Dashboard: Start by accessing your Auth0 tenant.
- Navigate to the APIs Section: In the left-hand sidebar, under the "Applications" menu, click on APIs. This section lists all the APIs configured in your Auth0 tenant.
- Select the Auth0 Management API: From the list of APIs displayed, find and click on the entry for the Auth0 Management API.
- Access the Settings Tab: Once you are on the detail page for the Auth0 Management API, click on the Settings tab.
- Identify the Audience Value: Within the Settings tab, you will see a field labeled Identifier. The string of text in this field is the exact audience value you should use when requesting an access token for the Auth0 Management API.
Example:
If the Identifier field displays https://your-tenant.auth0.com/api/v2/, then this URL is the audience you'll specify in your access token requests targeting the Auth0 Management API.
This identifier ensures that any access token issued with this audience is specifically intended for the Auth0 Management API, enhancing security by limiting the token's scope to its designated resource.
