OneTrust

Ensure your organization is compliant with privacy regulations while honoring customer choices with OneTrust PreferenceChoice™ and Auth0.

Operationalize Your Privacy, Security and Third-Party Risk Programs. OneTrust products work together to give you the automation, workflows and record keeping you need to comply with GDPR, CCPA, ISO 270001 and hundreds of the world’s privacy and security laws.

This integration sends Auth0 user emails to a OneTrust Collection Point during login. This will trigger the creation of a magic link token in OneTrust, which can be requested by your applications.

Pre-Requisites and Assumptions:

• An active Auth0 account (you can sign up for free here)
• Access to the OneTrust administration console
• Email as the primary identifier used to register a new user

Create a Collection Point in OneTrust

First, create and define a Collection Point in OneTrust (registration required).

As part of the setup, make sure to specify an Email data element that will be used to link the OneTrust Data Subject/Consumers Profile and the Auth0 user. Once the Collection Point is published:

1. Click on the Custom API tab
2. Copy your API URL, API Token, and the Id for the Collection Point's Purpose in the Expected Paylod section

Add the Auth0 Action

1. Select Add Integration (at the top of this page).
2. Configure the integration using the following fields:

• OneTrust Collection Point API Token
• OneTrust Collection Point API URL
• OneTrust Collection Point Purpose ID
• Skip if no email is available?: If set to "Yes" then the Action will be skipped if there is no email address. Otherwise the Action will fail with an error.

1. Click Create to add the integration to your Library.
2. Click the Add to flow link on the pop-up that appears.
3. Drag the Action into the desired location in the flow.
4. Click Apply Changes.

Please note: Once the Action has been added to the Post Login trigger, all logins for your tenant will be processed by this Action. Please make sure all components have been configured correctly and verified on a test tenant before activating the integration in production.

Next Steps

Once the user has been recorded on the OneTrust Collection Point, any of your applications can reach out to OneTrust to get a magic link to their Consent Center.