@WhoAmI , You may need to allow the correct origins and callbacks in the auth0 configuration to support using the same auth.
@jprdonnelly is also correct. You could set up an OAuth application on Auth0 (because in this case Qlik is the client, not the resource server) that has a relationship to the identity provider application. In this case, you would be able to set up the extension as a public client. You would add the client_id from auth0 to your extension and then have it make a request for an authorization and access token on Auth0.
Because you're already authenticated to Auth0, it should see that when the request for the authorization token comes through from your extension and gives you what you need to take the next step.
This may be helpful as well: https://auth0.com/docs/quickstart/spa/vanillajs/interactive
Do you mean to call one of the POST method /oauth/token https://qlik.dev/apis/rest/oauth
if yes, which body type should I use?
