> ## Documentation Index
> Fetch the complete documentation index at: https://docs-dev-actions-triggers-prototype.mintlify.site/llms.txt
> Use this file to discover all available pages before exploring further.

# Connection Profile

> Use a Connection Profile to specify how the private settings of an Auth0 connection should be configured when created by third parties.

Auth0 provides Enterprise connections to authenticate users in an external, federated identity provider (IdP) such as Okta, Microsoft Entra ID, Google Workspace, and others. A configured connection will include protocol-specific settings for integrating single sign-in (SSO), user provisioning, and logout integrations with the external IDP, as well as private settings that govern how the connection interacts with Auth0’s Universal Login and Organizations features.

The Connection Profile (CP) enables Auth0 developers to specify how the private settings of an Auth0 connection should be configured when created by third parties

## How it works

* **Profile Definition**: An administrator creates a Connection Profile that defines the property values that should be written to the connection whenever they are created using one of Auth0 delegated administration features.

* **Flexible Scope**: Profiles are linked to Self-Service Enterprise Configuration and Okta Express Configuration flows today but are designed for broader reuse, covering provisioning, onboarding, entitlement management, and future Auth0 capabilities.

## Connection Profile properties

A Connection Profile is a JSON object that supports these configurable properties, which are applied to all newly created connections.

| **Property**                              | **Description**                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          |
| ----------------------------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| `connection_name_prefix_template`         | Represents the prefix that must be used for naming connections. Maps to the `name` parameter on a connection. This value supports variable substitution for the organization ID and the organization name. The OIN workflow must substitute these values to generate the final prefix. Variables are enclosed in braces ({}). <p /> Supported variables: <p /> <ul><li>`org_id`: The Organization ID</li><li>`org_name`: The [Organization name](/docs/manage-users/organizations/configure-organizations/create-organizations#auth0-dashboard)</li></ul> <p /> Example: `con-{org_id}-` |
| `enabled_features`                        | This list specifies the features which will be supported by the configured connection. Features not on the list are not allowed.<p /> Supported values: <ul><li>`scim`: When present, SCIM may be configured on the connection.</li><li>`universal_logout`: When present, the Universal Logout feature may be used with this connection.</li></ul>                                                                                                                                                                                                                                       |
| `organization.assign_membership_on_login` | Specifies whether users should automatically be assigned membership in the organization on login. This maps to the `assign_membership_on_login` property of the `enabled_connections` sub-resource of the organization.  <Callout icon="file-lines" color="#0EA5E9" iconType="regular"> For Express Configuration integrations with Okta, `optional` is treated as `required`</Callout> <p />                                                                                                                                                                                            |

| Connection Profile Value      | Enable Connections`assign_membership_on_login`Value                                                                                                                                       |
| ----------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| `none`                        | `false`                                                                                                                                                                                   |
| `optional`                    | `false`                                                                                                                                                                                   |
| `required`                    | `true`                                                                                                                                                                                    |
| `organization`                | An object containing settings that are applied to the organization under which the connection is created.                                                                                 |
| `organization.show_as_button` | Specifies whether the connection should be shown as a button on the login screen once an organization has been chosen. This maps to the `show_as_button` value on the enabled connection. |

| Connection Profile Value | Connection `show_as_button` Value |
| ------------------------ | --------------------------------- |
| `none`                   | `false`                           |
| `optional`               | `true`                            |
| `required`               | `true`                            |

## Example Connection Profile

```json theme={null}
{
  "organization": {
    "show_as_button": "none",
    "assign_membership_on_login": "none"
  },
  "connection_name_prefix_template": "ec-{org_id}-",
  "enabled_features": [
    "scim",
    "universal_logout"
  ]
}
```

## Create and manage Connection Profiles

A Connection Profile is automatically generated when using the [Express Configuration](/docs/authenticate/identity-providers/enterprise-identity-providers/okta/express-configuration) feature with Okta. In addition, create and manage Connection Profiles using the Auth0 Management API.

### Configure with Management API

To use the Management API, you need to get a [Management API access token](/docs/secure/tokens/access-tokens/management-api-access-tokens). To manage Connection Profiles, the following Management API endpoints are available:

* `POST` `/api/v2/connection-profiles`
* `GET` `/api/v2/connection-profiles`
* `PATCH` `/api/v2/connection-profiles/{id}`
* `GET` `/api/v2/connection-profiles/{id}`
* `GET` `/api/v2/connection-profiles/templates`

## Learn More

* [Express Configuration](/docs/authenticate/identity-providers/enterprise-identity-providers/okta/express-configuration)
* [Manage Users Using Management API](/docs/manage-users/user-accounts/manage-users-using-the-management-api)