# Email with plus (+) sign mapping

**URL:** <https://community.auth0.com/t/email-with-plus-sign-mapping/185853>\
**Category:** Get Help\
**Tags:** identifier-first, login-experience\
**Created:** [April 23, 2025, 3:52pm UTC](https://community.auth0.com/t/email-with-plus-sign-mapping/185853 "2025-04-23T15:52:03Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![josh.morningstar](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/josh.morningstar/32/59823_2.png) [@josh.morningstar](https://community.auth0.com/u/josh.morningstar)\
**Post date:** [April 23, 2025, 3:52pm UTC](https://community.auth0.com/t/email-with-plus-sign-mapping/185853/1 "2025-04-23T15:52:03Z")

</div>

Greetings,

From my research, it appears Auth0 handles email addresses with plus signs (+) as regular email addresses already. For example: [test+more@example.com](mailto:test+more@example.com) would automagically map to [test@example.com](mailto:test@example.com). If this is in fact the case, and if [example.com](http://example.com) in this case were a third party IdP, and we had identifier first configured on our profiles — would it be at all possible for [test+more@example.com](mailto:test+more@example.com) to exist as a separate user in the Auth0 username/password database as a wholly separate user?

Our use case is that our internal users are looking to work outside the confines of our AAD logins for our staging applications. They need separate logins for individual customer demos, and we use WAAD login for them. We would like to use username/password combination for them, but identifier first is seeing their suffix domain and sending their logins automaticallyss to the third party IdP. Our use case here would have [test@example.com](mailto:test@example.com) working through WAAD while [test+more@example.com](mailto:test+more@example.com) flows through username/password flow.

Is there a configuration or action that can make this setup work for us? It is pertinent to get this working for our internal users. Thank you for your help in advance!

---

<div class="post-metadata">

**Author:** ![vlad.murarasu](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/vlad.murarasu/32/72793_2.png) [@vlad.murarasu](https://community.auth0.com/u/vlad.murarasu)\
**Post date:** [April 23, 2025, 5:26pm UTC](https://community.auth0.com/t/email-with-plus-sign-mapping/185853/3 "2025-04-23T17:26:53Z")

</div>

Hi @josh.morningstar,

Welcome to the Auth0 Community!

Emails using the + sign are treated as different emails in the Auth0 database, which means that, yes, you can use [test@example.com](mailto:test@example.com) and [test+more@example.com](mailto:test+more@example.com) as two separate users.

 ![Screenshot 2025-04-23 at 20.11.38](https://global.discourse-cdn.com/auth0/original/3X/a/0/a0a342d824d113efe020a3a519a8a3a9aff25e34.png)

Unfortunately the Identifier First Authentication Profile does not work with automatically detecting which one of the two emails with the same domain should proceed with Active Directory over Username/Password. If you’ve set up [example.com](http://example.com) as your domain for Home Realm Discovery, it will get picked up from all emails using that domain. It does not take the + sign into consideration.

I would advise, as configuration, to keep @example.com as the domain for your employees and have a different domain for internal users, just for testing.

If you have any other questions, feel free to reach out.

Have a good one,  
Vlad

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/auth0/original/3X/b/5/b560f266932fcce5d57f09a6595bd50518cae3f3.jpeg) [@system](https://community.auth0.com/u/system)\
**Post date:** [May 7, 2025, 5:27pm UTC](https://community.auth0.com/t/email-with-plus-sign-mapping/185853/4 "2025-05-07T17:27:43Z")

</div>

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.
