Several sites I use are using the Auth0 service. I noticed that on all of these sites, when I log in using my personal GMail address, the username it pulls is from a separate, business Google Workspace account. These two things shouldn’t be linked anywhere, my personal GMail is a separate email address and separate account from the business account.
Could someone help me figure out why this is happening, so I can fix it? Feels a little like a violation of privacy.
While it would look like Auth0 is linking your accounts, I can assure you that it is not, and your privacy is kept. What is happening behind the scenes is that your browser stores a session of the accounts you use. When you click on a “Sign in with Google” button, Auth0 redirects you to Google (the identity provider), and Google checks your browser for a session to know what accounts to display for you to choose from.
I can’t give much insight into how to set up your Google accounts so that this doesn’t happen, but perhaps using different browsers for personal and business accounts could work.
Thanks for getting back to me so quickly. Just to clarify, I’m not clicking a Sign in with Google button.
If I was using Sign in with Google, then it would make sense that I would see a list of all of the different email addresses that I’m currently signed into on that browser.
However, that’s not what happens. I go to the login page, which asks for just my email address. I type in my personal email address, and then I see the screen below. It shows my business name in Welcome and icon, but my personal email address in the login info. I sign in using a password, which is my preferred method of signing in to websites/apps. I’m still not sure why Auth0 would retrieve an account name from a separate email address, other than the one I’m using to log in.
I took a screenshot, but can’t embed it in this post.