Groups with Azure AD Enterprise Connection

Overview

This article explains how to get the groups array to populate with an Azure AD Enterprise Connection.

Solution

The following configurations work to populate the groups array in the Auth0 user profile with an Azure AD Enterprise connection:

  • Identity API: Azure Active Directory (v1) + Protocol: OpenID Connect + Extended Attributes: Get user groups
  • Identity API: Microsoft Identity Platform (v2) + Extended Attributes: Get user groups

The groups array will not populate with:

  • Identity API: Azure Active Directory (v1) + Protocol: WS Federation + Extended Attributes: Get user groups