There are three supported methods of authenticating the Auth0 Deploy CLI with your tenant.

Client credentials

Client credentials authentication requires you provide a and pair directly to the application. This option is straightforward and enables the quickest path to setup for the tool. To configure client credentials authentication, set the the following fields in your configuration file:
FieldValue
AUTH0_CLIENT_IDClient ID of your Auth0 application.
AUTH0_CLIENT_SECRETClient secret of your Auth0 application.

Private key JWT

Private key JWT authentication requires you configure a private key for the application and a public key for the remote tenant. This option is ideal if do not want to store credentials remotely on Auth0. To configure private key authentication, set the following fields in your configuration file:
FieldValue
AUTH0_CLIENT_SIGNING_KEY_PATHRelative path to the JWT signing key certificate.
AUTH0_CLIENT_SIGNING_ALGORITHMOptional. JWT signing algorithm used for the certificate.

Access token

Access token authentication requires you provide an Auth0 directly to the application. This option puts more responsibility on developers but can enable flexible and specific workflows when necessary. To configure access token authentication, pass a Management API Auth0 access token through the AUTH0_ACCESS_TOKEN environment variable.