ISSUE: Unexpected `Wrong email or password`

[unfor19]

Hi,

Scenario

Created database DB1, enabled access to apps APP1 and APP2
Created database DB2, enabled access to app APP1 only

Added users to database DB1
Added users to database DB2 (different email addresses, not the same as DB1)

DB1 --> APP1 + APP2
DB2 --> APP1

Issue

Attempting to login to APP1 and APP2 with users from database DB1 - everything is fine.
Attempting to login to APP1 with users from database DB2 - I get Wrong email or password

I’ve made sure that database DB2 has a connection to APP1 and also did “Try Connection” on DB2, with a user from DB2, and it worked.

I really don’t know what could be the issue, any suggestions?

[colin.coutts]

Hi @unfor19 and welcome to the Auth0 Community!

Are these DB connections Custom DB’s or are both user stores in Auth0? In any case this is a bit difficult to diagnose just from this description, would you mind sending me a .har of this as well as your tenant name in a DM so I can look into this a bit more on my end?

Thanks!
Colin

[unfor19]

Both regular databases on Auth0, not custom. Sending you .har and tenant ID in private.

[colin.coutts]

Hi @unfor19

Thanks again for sending along that information, that gave my some clarity as to what you’re going after. The behavior you’ve recorded is to be expected as the Hosted Login Page (HLP) doesn’t scan all available database connections per login. From my testing it’ll take the first successful login connection and apply that to subsequent login attempts by different users.

Depending on your user pool you may be able to get around this by adding the connectionResolver option to your HLP in the options. A link to that can be found here:

Select from Multiple Connection Options

However this relies on you having a way to differentiate between the separate user pools (in this example they use email domain however I don’t know how applicable that will be for your use-case). Another option to consider is to consolidate your users into one database and to differentiate your users based on Role Based Access Control (RBAC) which gives you a much higher degree of control over what types of access your users have when interacting with your application.

Best Regards,
Colin

[unfor19]

Hi Colin, thank you very much for the prompt reply!
Since we’re using Auth0 as a protection to our dev+staging sites, this is an acceptable solution. I’ll apply the connectionResolver

[konrad.sopala]

Glad you guys have figured it out!