# Synchronizing Role and User Information Updates Between Ignition and Auth0

**URL:** <https://forum.inductiveautomation.com/t/synchronizing-role-and-user-information-updates-between-ignition-and-auth0/92616>\
**Category:** Ignition\
**Tags:** vision, perspective\
**Created:** [July 1, 2024, 11:58am UTC](https://forum.inductiveautomation.com/t/synchronizing-role-and-user-information-updates-between-ignition-and-auth0/92616 "2024-07-01T11:58:13Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![Maan\_Patel1](https://avatars.discourse-cdn.com/v4/letter/m/c89c15/32.png) [@Maan\_Patel1](https://forum.inductiveautomation.com/u/Maan_Patel1)\
**Post date:** [July 1, 2024, 11:58am UTC](https://forum.inductiveautomation.com/t/synchronizing-role-and-user-information-updates-between-ignition-and-auth0/92616/1 "2024-07-01T11:58:13Z")

</div>

Hello Ignition Community,

We are currently working on a project that uses Auth0 as an OpenID Connect 1.0 Identity Provider, and we store user roles within Auth0. When a new user signs up, they are assigned a default "guest" role, which is changed upon admin approval.

We have developed a user management page in Ignition Perspective, similar to the Vision user management component, where users can update their roles, email addresses, and phone numbers. Currently, these updates are only reflected in Ignition's internal user source.

Our goal is to ensure that any changes made to user roles, email addresses, and phone numbers in Ignition are also updated in Auth0. This is a multi-client project, so we are looking for an efficient way to achieve this synchronization.

For example, when a user adds a new person and assigns that person to an "operator" role, updates the email and phone number, and then clicks save from the Perspective user management dashboard, these changes should be reflected in Auth0.

Does anyone have experience or suggestions on how to best integrate these updates with Auth0's user management dashboard? We are specifically looking for methods to:

1. Update user roles in Auth0 when they are changed in Ignition.
2. Synchronize email addresses and phone numbers between Ignition and  
Auth0.

Any advice or examples of similar implementations would be greatly appreciated!

Thank you!

---

<div class="post-metadata">

**Author:** ![paul-griffith](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/paul-griffith/32/37249_2.png) [@paul-griffith](https://forum.inductiveautomation.com/u/paul-griffith)\
**Post date:** [July 1, 2024, 3:21pm UTC](https://forum.inductiveautomation.com/t/synchronizing-role-and-user-information-updates-between-ignition-and-auth0/92616/2 "2024-07-01T15:21:31Z")

</div>

You cannot do this, or at least shouldn't attempt it. The _entire point_ of IdPs is to offload the authentication/authorization question to a "black box" - whether that's first or third party. If you're using Auth0 as your IdP, you would have to figure out whether Auth0 has some standard API you can call into to perform such user management operations. Or, switch from Auth0 to Ignition's internal IdP, and use our user-source based API to manage users.

Trying to bridge two _disparate_ systems like this is only going to end badly.
