Classic Login not recognizing Idp domain in Enterprise connections

Get Help
,
1

Hi,
We are currently using the custom login experience. We upgraded to B2B Essentials and configured a new enterprise SAML connection to an Azure domain “xyz.onmicrosoft.com” where xyz is customer’s domain. The set was tested from within the Auth0 dashboard so we know its configured correctly. When typing in the login screen for our app that is using the classic login, we enter “user1@zyx.onmicrosoft.com” but the password field remains. Is there something we have to set to enable it to recognize the “xyz.onmicrosoft.com” domain and initiate a SSO workflow to the idp? If we switch to the new universal login, will everything work correctly? -Thank you!!

3

Hi @ssinclair,

I believe you might be authenticating with a regular database connection on your login screen instead of redirecting to the IdP.

I suggest referring to this section of our documentation to allow users to authenticate against your IdP.

Let me also add that if you use the New Universal Login experience, you can Configure Identifier First Authentication, which will allow home realm discovery, which is the feature you are mentioning.

Let me know if you have any questions.

Thanks,
Rueben

4

Hi,

I have to support both database and IdP. Most of our accounts are fine with username and password, but our newest require SSO. So It looks like we have to switch to the universal login with Identifier first. Is there a way to test this in a UAT or development environment before switching to universal login? Our custom login is for logo and style only there are no other reasons to use it. We do have actions but that doesn’t get effected on the login template correct? Thanks!!

5

Hi @ssinclair,

Thanks for the reply.

Yes, that’s correct. You must switch to the New Universal Login with Identifier first to support your use case.

You could test this in a development tenant with the same settings as your production tenant.

To do so, you could use the Deploy CLI Tool to export your production tenant settings to your development tenant.

As for the logo and style you have configured on your custom universal login page, you can accomplish the same with the New Universal Login.

See our Customize Universal Login Page Themes and Customize Universal Login Page Templates documentation.

Cheers,
Rueben

6

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.