Allow two organizations to login to app without specifying organization query parameter

Get Help
,
1

I have an Auth0 application which I want to be able to allow two types of users to access: internal admins and client users. With the Universal Login, is there a way to enable this without specifying ‘organization’ or ‘connection’ query string parameters?

I want it to work like:

  1. My app redirects unauthenticated user to Auth0 /authorize with the client_id param set, but no organization/connection params
  2. No matter whether the user is an internal admin or a client user, the login form allows them to authenticate

What’s currently happening:

  1. My app redirects unauthenticated user to Auth0 /authorize with the client_id param set, but no organization/connection params
  2. The login only accepts the user’s credentials if they are in a specific one of the connections on the application. Seems to be the first in the list on the connections page?

These are my current Auth0 settings:

  • Application has two connections enabled (internal org, client org)
  • Each connection is connected to its own organization (internal org, client org)
  • Authentication → Authentication Profile = Identifier First
  • Application → Login Experience = Business Users + Prompt for Credentials

Let me know if I’ve architected this weirdly and there’s a better way.

3

Hi @james19,

Welcome to the Auth0 Community!

Unfortunately, when using Prompt for Credentials, only the first database on the connection’s list will be used.

You have to use Prompt for Organization and let users choose the organization they’re a part of. That way, only the connection for their Organization will be selected.

If you have any other questions, feel free to reach out.

Have a good one,
Vlad