From Auth0.
Same spec. Simpler model.
Auth0 and Synq both speak OIDC. The migration is mostly mapping your Tenant / Application / Connection setup onto Synq's Org / Brand / App tree, swapping the SDK, and replacing Rules/Actions with webhooks + your own backend.
Auth0 → Synq
| Auth0 | Synq |
|---|---|
| Auth0 Tenant | Synq Org |
| Auth0 Application | Synq App (under a Brand) |
| Auth0 Connections | Synq Brand Connections |
| Universal Login customization | Synq Brand theming + <SignIn /> modal |
| Rules / Actions | Synq webhooks (for side-effects) + your own backend (for auth logic) |
| Auth0 Hooks (legacy) | Synq webhooks |
| Roles + Permissions | Synq scopes (Brand-scoped custom) + your own RBAC |
| Anomaly detection / breached passwords | Synq rate limits + per-IP throttling |
| Auth0 Management API | Synq REST API + Org API keys |
| Auth0 SDK | @synqid/js (browser, Node) · @synqid/react · @synqid/nextjs |
Three phases, no big-bang
1. Mirror your Auth0 Applications as Synq Apps
Create one Org. Create one Brand per Auth0 Tenant (most Auth0 deployments use a single tenant, so this is usually one Brand). Register an App per Auth0 Application: same type (web, SPA, native, M2M), same redirect URIs, same allowed grants.
2. Run dual-issuer for a sprint
Your backend accepts JWTs from Auth0 AND from Synq during the migration window. New sign-ins land in Synq; existing Auth0 sessions keep working until they expire. The `iss` claim on the token tells you which issuer minted it.
3. Rewrite Rules + Actions as webhooks
Auth0 Rules ran inside the sign-in flow. The Synq equivalent is webhooks (for side-effects: send a welcome email, sync to your CRM) and your own backend (for branching: deny based on a database lookup). Most teams find the explicit split easier to reason about.
4. Migrate user records
Synq supports user-record import via the platform API. The cleanest path: export your Auth0 users, normalize emails + verified-email flags, POST to Synq’s user-import endpoint. Connections (Google, Apple, etc.) re-bind on first sign-in.
Common questions
Move off Auth0 without a rewrite.
Same OIDC spec on both sides. Run dual-issuer, rewrite routes one at a time, retire Auth0 when the dashboard goes quiet.