Auth0 connector

Set up the Auth0 connector in Kaivo: authentication, configuration, the 5 BigQuery tables it syncs, and answers to common questions.

Written By Lauri Raivio

Last updated 16 days ago

Kaivo is a fully managed data platform that syncs your Auth0 data into a Google BigQuery warehouse and keeps it up to date automatically. There is no pipeline to build and no infrastructure to run, so you can spend your time analysing your data from Auth0 instead of moving it.

What is the Auth0 connector

Sync your Auth0 users, organizations, and clients into BigQuery with Kaivo to analyse sign-ups, adoption, and access alongside your product data.

Category	Tech
Authentication	API key
Setup	Self-service

Getting started with the Auth0 connector

Sign up for Kaivo and create a workspace.
Connect your Auth0 account.
Choose which tables to sync.
Wait for the initial sync to finish.
Query your data in BigQuery or your favourite AI or BI tool.

Authenticating Auth0

The Auth0 connector supports 2 ways to connect. Pick the one that fits how you work.

OAuth2 Confidential Application

Authenticate with your Auth0 credentials. You provide:

Field	Description
Client ID	Your application's Client ID. You can find this value on the application's settings tab after you login the admin portal.
Client Secret	Your application's Client Secret. You can find this value on the application's settings tab after you login the admin portal.
Audience	The audience for the token, which is your API. You can find this in the Identifier field on your API's settings tab

OAuth2 Access Token

Authenticate with your OAuth2 Access Token.

Field	Description
OAuth2 Access Token	Also called API Access Token. The access token used to call the Auth0 Management API Token. It's a JWT that contains specific grant permissions knowns as scopes.

Configuring the Auth0 connector

When you set up the connector, you provide:

Field	Description
Base URL	The Authentication API is served over HTTPS. All URLs referenced in the documentation have the following base `https://YOUR_DOMAIN`
Start Date	Any data before this date will not be fetched.

Tables and columns synced from Auth0

Kaivo syncs 5 tables from Auth0 into a dedicated dataset in your BigQuery warehouse. Click any table to see its columns and types.

clients (36 columns)

Column	Type	Description
`_kaivo_id`	`STRING`	Primary key that uniquely identifies the row. Auto-generated by Kaivo.
`client_id`	`STRING`
`tenant`	`STRING`
`is_token_endpoint_ip_header_trusted`	`BOOL`
`cross_origin_auth`	`BOOL`
`callback_url_template`	`BOOL`
`name`	`STRING`
`description`	`STRING`
`global`	`BOOL`
`client_secret`	`STRING`
`app_type`	`STRING`
`logo_uri`	`STRING`
`is_first_party`	`BOOL`
`oidc_conformant`	`BOOL`
`jwt_configuration__lifetime_in_seconds`	`INT64`
`jwt_configuration__secret_encoded`	`BOOL`
`jwt_configuration__alg`	`STRING`
`encryption_key__pub`	`STRING`
`encryption_key__cert`	`STRING`
`encryption_key__subject`	`STRING`
`sso`	`BOOL`
`sso_disabled`	`BOOL`
`cross_origin_authentication`	`BOOL`
`cross_origin_loc`	`STRING`
`custom_login_page_on`	`BOOL`
`custom_login_page`	`STRING`
`custom_login_page_preview`	`STRING`
`form_template`	`STRING`
`token_endpoint_auth_method`	`STRING`
`initiate_login_uri`	`STRING`
`refresh_token__rotation_type`	`STRING`
`refresh_token__expiration_type`	`STRING`
`refresh_token__leeway`	`INT64`
`organization_usage`	`STRING`
`organization_require_behavior`	`STRING`
`_kaivo_extracted_at`	`TIMESTAMP`	Timestamp that shows when the row was extracted. Auto-generated by Kaivo.

Subtable: clients__owners

Column	Type	Description
`_kaivo_parent_id`	`STRING`	Foreign key referencing _kaivo_id in the parent table. Auto-generated by Kaivo.
`_kaivo_id`	`STRING`	Primary key that uniquely identifies the row. Auto-generated by Kaivo.
`value`	`STRING`
`_kaivo_extracted_at`	`TIMESTAMP`	Timestamp that shows when the row was extracted. Auto-generated by Kaivo.

Subtable: clients__callbacks

Column	Type	Description
`_kaivo_parent_id`	`STRING`	Foreign key referencing _kaivo_id in the parent table. Auto-generated by Kaivo.
`_kaivo_id`	`STRING`	Primary key that uniquely identifies the row. Auto-generated by Kaivo.
`value`	`STRING`
`_kaivo_extracted_at`	`TIMESTAMP`	Timestamp that shows when the row was extracted. Auto-generated by Kaivo.

Subtable: clients__allowed_origins

Column	Type	Description
`_kaivo_parent_id`	`STRING`	Foreign key referencing _kaivo_id in the parent table. Auto-generated by Kaivo.
`_kaivo_id`	`STRING`	Primary key that uniquely identifies the row. Auto-generated by Kaivo.
`value`	`STRING`
`_kaivo_extracted_at`	`TIMESTAMP`	Timestamp that shows when the row was extracted. Auto-generated by Kaivo.

Subtable: clients__web_origins

Column	Type	Description
`_kaivo_parent_id`	`STRING`	Foreign key referencing _kaivo_id in the parent table. Auto-generated by Kaivo.
`_kaivo_id`	`STRING`	Primary key that uniquely identifies the row. Auto-generated by Kaivo.
`value`	`STRING`
`_kaivo_extracted_at`	`TIMESTAMP`	Timestamp that shows when the row was extracted. Auto-generated by Kaivo.

Subtable: clients__client_aliases

Column	Type	Description
`_kaivo_parent_id`	`STRING`	Foreign key referencing _kaivo_id in the parent table. Auto-generated by Kaivo.
`_kaivo_id`	`STRING`	Primary key that uniquely identifies the row. Auto-generated by Kaivo.
`value`	`STRING`
`_kaivo_extracted_at`	`TIMESTAMP`	Timestamp that shows when the row was extracted. Auto-generated by Kaivo.

Subtable: clients__allowed_clients

Column	Type	Description
`_kaivo_parent_id`	`STRING`	Foreign key referencing _kaivo_id in the parent table. Auto-generated by Kaivo.
`_kaivo_id`	`STRING`	Primary key that uniquely identifies the row. Auto-generated by Kaivo.
`value`	`STRING`
`_kaivo_extracted_at`	`TIMESTAMP`	Timestamp that shows when the row was extracted. Auto-generated by Kaivo.

Subtable: clients__allowed_logout_urls

Column	Type	Description
`_kaivo_parent_id`	`STRING`	Foreign key referencing _kaivo_id in the parent table. Auto-generated by Kaivo.
`_kaivo_id`	`STRING`	Primary key that uniquely identifies the row. Auto-generated by Kaivo.
`value`	`STRING`
`_kaivo_extracted_at`	`TIMESTAMP`	Timestamp that shows when the row was extracted. Auto-generated by Kaivo.

Subtable: clients__oidc_backchannel_logout__backchannel_logout_urls

Column	Type	Description
`_kaivo_parent_id`	`STRING`	Foreign key referencing _kaivo_id in the parent table. Auto-generated by Kaivo.
`_kaivo_id`	`STRING`	Primary key that uniquely identifies the row. Auto-generated by Kaivo.
`value`	`STRING`
`_kaivo_extracted_at`	`TIMESTAMP`	Timestamp that shows when the row was extracted. Auto-generated by Kaivo.

Subtable: clients__grant_types

Column	Type	Description
`_kaivo_parent_id`	`STRING`	Foreign key referencing _kaivo_id in the parent table. Auto-generated by Kaivo.
`_kaivo_id`	`STRING`	Primary key that uniquely identifies the row. Auto-generated by Kaivo.
`value`	`STRING`
`_kaivo_extracted_at`	`TIMESTAMP`	Timestamp that shows when the row was extracted. Auto-generated by Kaivo.

Subtable: clients__signing_keys

Column	Type	Description
`_kaivo_parent_id`	`STRING`	Foreign key referencing _kaivo_id in the parent table. Auto-generated by Kaivo.
`_kaivo_id`	`STRING`	Primary key that uniquely identifies the row. Auto-generated by Kaivo.
`_kaivo_extracted_at`	`TIMESTAMP`	Timestamp that shows when the row was extracted. Auto-generated by Kaivo.

organization_member_roles (7 columns)

Column	Type	Description
`_kaivo_id`	`STRING`	Primary key that uniquely identifies the row. Auto-generated by Kaivo.
`id`	`STRING`
`org_id`	`STRING`
`user_id`	`STRING`
`name`	`STRING`
`description`	`STRING`
`_kaivo_extracted_at`	`TIMESTAMP`	Timestamp that shows when the row was extracted. Auto-generated by Kaivo.

organization_members (7 columns)

Column	Type	Description
`_kaivo_id`	`STRING`	Primary key that uniquely identifies the row. Auto-generated by Kaivo.
`org_id`	`STRING`
`user_id`	`STRING`
`name`	`STRING`
`email`	`STRING`
`picture`	`STRING`
`_kaivo_extracted_at`	`TIMESTAMP`	Timestamp that shows when the row was extracted. Auto-generated by Kaivo.

organizations (5 columns)

Column	Type	Description
`_kaivo_id`	`STRING`	Primary key that uniquely identifies the row. Auto-generated by Kaivo.
`id`	`STRING`
`name`	`STRING`
`display_name`	`STRING`
`_kaivo_extracted_at`	`TIMESTAMP`	Timestamp that shows when the row was extracted. Auto-generated by Kaivo.

users (19 columns)

Column	Type	Description
`_kaivo_id`	`STRING`	Primary key that uniquely identifies the row. Auto-generated by Kaivo.
`user_id`	`STRING`
`username`	`STRING`
`email`	`STRING`
`email_verified`	`BOOL`
`phone_number`	`STRING`
`phone_verified`	`BOOL`
`created_at`	`TIMESTAMP`
`updated_at`	`TIMESTAMP`
`picture`	`STRING`
`name`	`STRING`
`nickname`	`STRING`
`last_ip`	`STRING`
`logins_count`	`INT64`
`blocked`	`BOOL`
`last_login`	`STRING`
`given_name`	`STRING`
`family_name`	`STRING`
`_kaivo_extracted_at`	`TIMESTAMP`	Timestamp that shows when the row was extracted. Auto-generated by Kaivo.

Subtable: users__identities

Column	Type	Description
`_kaivo_parent_id`	`STRING`	Foreign key referencing _kaivo_id in the parent table. Auto-generated by Kaivo.
`_kaivo_id`	`STRING`	Primary key that uniquely identifies the row. Auto-generated by Kaivo.
`connection`	`STRING`
`_kaivo_extracted_at`	`TIMESTAMP`	Timestamp that shows when the row was extracted. Auto-generated by Kaivo.

Subtable: users__multifactor

Column	Type	Description
`_kaivo_parent_id`	`STRING`	Foreign key referencing _kaivo_id in the parent table. Auto-generated by Kaivo.
`_kaivo_id`	`STRING`	Primary key that uniquely identifies the row. Auto-generated by Kaivo.
`value`	`STRING`
`_kaivo_extracted_at`	`TIMESTAMP`	Timestamp that shows when the row was extracted. Auto-generated by Kaivo.

How the Auth0 sync works

After the first load, Kaivo keeps your BigQuery warehouse up to date for you. Where Auth0 supports it, each sync pulls only new and changed records so it stays fast; otherwise it refreshes the whole table. Every record keeps its original ID, so you won't get duplicate rows.

Frequently asked questions

How long does the initial sync take for Auth0?

It depends on how much history is in your Auth0 account. Most initial syncs finish within minutes, while large accounts can take a few hours. After that, syncs only fetch new and changed records, so they're much faster.

Can I sync only some tables or columns?

Yes. You pick which tables to sync when you set up the connection and can change the selection later. Tables you don't select are never copied to your warehouse.

What happens when Auth0's schema changes?

New fields are never added automatically. You choose which fields to sync, so data you haven't selected (sensitive personal data, for example) never lands in your warehouse. When a new field appears, it becomes available for you to add. What happens to removed or renamed fields depends on a table's sync mode: full-refresh tables always match what's currently in Auth0, so dropped fields disappear, while incremental tables keep their existing columns and history, so an old field stays and newly added fields fill in over time.

Your data lives in your own Kaivo-managed BigQuery warehouse, so the most direct option is to delete or anonymise specific records right in BigQuery. If you delete data in Auth0 instead, full-refresh tables drop it on the next sync, while incremental tables keep it, so you would remove the row in BigQuery or ask us to run a full refresh. To remove everything, delete the Auth0 connector in Kaivo and all of its synced data is deleted with it.

Common use cases for Auth0 data

Use the users table to track new registrations and active accounts over time.

Organization adoption

Analyse organizations and organization_members to see which customers are onboarding users.

Access and roles

Report on organization_member_roles to audit who has access to what.

Auth and product together

Join Auth0 users with product usage in BigQuery to connect onboarding to engagement.

Use Auth0 data in your AI and BI tools

Once Auth0 data lands in your Kaivo-managed BigQuery warehouse, you can explore it with AI tools or any BI tool that connects to BigQuery. Here's how the most common destinations work with Auth0 data.

Claude

Use Kaivo's MCP server to give Claude secure, workspace-scoped access to your data. Setup guide →

Power BI

Microsoft's BI tool with a native BigQuery connector. Supports direct query and scheduled refresh. Setup guide →

Data Studio

Free Google BI tool with native BigQuery support. One-click connection to your Kaivo warehouse; great for SMB teams on Google Workspace. Setup guide →

Tableau

The premium analytics standard, with native BigQuery integration. Setup guide →

Google Sheets

Use Connected Sheets to query BigQuery directly from a spreadsheet, with no SQL. Setup guide →

Excel

Connect via Power Query's BigQuery connector. Setup guide →

Metabase

Open-source BI tool with strong BigQuery support. Setup guide →

See our pricing page for Auth0 connector pricing and plan details.

Adform: Sync Adform to BigQuery.
Amplitude: Sync Amplitude to BigQuery.
Convex: Sync Convex to BigQuery.
GitHub: Sync GitHub to BigQuery.
GitLab: Sync GitLab to BigQuery.
Linear: Sync Linear to BigQuery.

Was this helpful?

Still need help? Share an idea