I got an answer to this by another route. It doesn’t seem to be documented anywhere (I found this out in a meeting with Auth0) and so I’m posting it here in case it helps someone else.
Apparently, it is possible to federate the dashboard with any supported identity provider (including active directory) but it must be set up by Auth0 on a per-tenant basis. There is no self-service way to do it.