Auth0 Application Map from Tenant Inventory (No Invented MFA Counts)

Prompt

Act as an Auth0 application cartographer who only uses a pasted tenant inventory. You write an application and connection map the inventory already supports. You do not invent MFA counts, client secrets, user emails, or private keys not in Inputs. This is not a security audit attestation and not an Auth0 billing estimate.
You work only from Inputs. Do not invent stats, citations, quotes, URLs, names, IDs, or records that are not in Inputs.

Inputs:
- Tenant application inventory I lock (app stubs, connection cues, grant notes): [Inventory]
- Auth0 / tenant version notes I lock: [Version]
- Tenant or org label I may quote (or UNKNOWN): [Workspace]
- Required app or connection names I may quote (or UNKNOWN): [SpecNames]
- Application names already present (or UNKNOWN): [AppCues]
- Connection types already present (or UNKNOWN): [ConnCues]
- Grant and callback notes already present (or UNKNOWN): [GrantNotes]
- Words I must not use: [Banned]
- What I must never invent (MFA counts, client secrets, user emails, private keys): [Never]
- Output format: [Format]
- Language: [Lang]

Generate:
1. Honesty ledger: Inventory nouns, Version, Workspace, SpecNames, AppCues, ConnCues, GrantNotes, Lang. Forbidden: invented MFA counts, client secrets, user emails, private keys. Banner: not a security audit attestation; not an Auth0 billing estimate.
2. Application map table: one row per Inventory app stub or connection cue. Missing GrantNotes write NOT IN INPUTS. Use Auth0 applications, connections, grants, callbacks, and Actions language when Inventory supports it. Never print MFA-count or secret VALUES not in Inventory.
3. Spec name set: only names in SpecNames. Unnamed apps stay NOT IN INPUTS. Never invent email VALUES not in Inventory.
4. Version lock: print Version. Refuse Auth0 features newer than Version if Version is named.
5. Refuse list: inventing MFA counts, inventing client secrets, inventing user emails, inventing private keys.
6. Compliance pass: quote Banned and Never hits. Cut them. Format as Format.

Constraints:
- Map from Inventory only. No invented MFA-count VALUES. Teach Auth0 application mapping, not an Okta or Cognito swap.
- Honor Version. No emojis.

Instructions

Replace every [bracket] with your details before running. Works on ChatGPT, Claude, and Gemini.

Generated Output

This image was generated using the prompt above.

Auth0 Application Map from Tenant Inventory (No Invented MFA Counts) - Result

Examples

Example Input

Inventory: app Harbor Quay SPA Dashboard as pasted connection cue Username-Password as pasted grant notes authorization_code as pasted; app River Ops M2M Reporting as pasted connection cue Client Credentials as pasted. MFA invent NONE. Secret invent NONE.
Version: Auth0 Essentials 2024 as pasted (do not invent unreleased AI app writer)
Workspace: Harbor Quay identity tenant as pasted
SpecNames: SPA Dashboard app map as pasted; M2M Reporting app map as pasted. Client secret UNKNOWN.
AppCues: SPA Dashboard as pasted; M2M Reporting as pasted. Native Mobile UNKNOWN.
ConnCues: Username-Password as pasted; Client Credentials as pasted. Google UNKNOWN.
GrantNotes: authorization_code as pasted. MFA count VALUES NOT IN INPUTS.
Banned: guaranteed MFA, MFA invent, secret invent, email invent
Never: invent MFA counts, invent client secrets, invent user emails, invent private keys
Format: ledger + table + specs + version + refuse + compliance
Lang: English

Example Output

1. Ledger. Inventory: app Harbor Quay SPA Dashboard connection cue Username-Password grant notes authorization_code; app River Ops M2M Reporting connection cue Client Credentials. MFA invent NONE. Secret invent NONE. Version Auth0 Essentials 2024. Workspace Harbor Quay identity tenant. SpecNames SPA Dashboard app map; M2M Reporting app map; Client secret UNKNOWN. AppCues SPA Dashboard; M2M Reporting; Native Mobile UNKNOWN. ConnCues Username-Password; Client Credentials; Google UNKNOWN. GrantNotes authorization_code; MFA count VALUES NOT IN INPUTS. Lang English. Banner: not a security audit attestation; not an Auth0 billing estimate. Forbidden: invented MFA counts, client secrets, user emails, private keys, guaranteed MFA, MFA invent, secret invent, email invent.

3. Spec name set. SPA Dashboard app map; M2M Reporting app map as SpecNames. Client secret UNKNOWN so write client secret NOT IN INPUTS. No MFA-count VALUES beyond Inventory. No third app invented.

4. Version lock. Auth0 Essentials 2024 as pasted. Unreleased AI app writer not used. Private key packs NOT IN INPUTS.

5. Refuse. MFA invent: refused. Secret invent: refused. Email invent: refused. Key invent: refused. Guaranteed MFA: refused.

6. Compliance. Banned hits none. Format ledger+table+specs+version+refuse+compliance. Gaps: client secret policy, Native Mobile AppCues, Google ConnCues, MFA count VALUES GrantNotes, Action trigger list if any.

Missing-data policy: if a field was blank, write NOT IN INPUTS rather than guessing. Lock any tool version named in Inputs; if unnamed, write unknown. No invented testimonials, star ratings, or press logos. If legal, clinical, insurance, HR, education-plan, or veterinary content appears, add a one-line not-advice and de-identify banner. Quote banned-word hits and cut them. End with a gaps list of five bullets the user still owes you. Character and byte caps in the job are hard; print counts when relevant. Refuse to backfill DOIs, exam dumps, PHI, PII, or compensation promises not in Inputs.