# Multi-Org User cannot login via U/P if their account is using SAML in another Org

**URL:** <https://community.auth0.com/t/multi-org-user-cannot-login-via-u-p-if-their-account-is-using-saml-in-another-org/128822>\
**Category:** Get Help\
**Tags:** identifier-first, login-experience\
**Created:** [March 4, 2024, 2:57am UTC](https://community.auth0.com/t/multi-org-user-cannot-login-via-u-p-if-their-account-is-using-saml-in-another-org/128822 "2024-03-04T02:57:16Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![ahns](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/ahns/32/59717_2.png) [@ahns](https://community.auth0.com/u/ahns)\
**Post date:** [March 4, 2024, 2:57am UTC](https://community.auth0.com/t/multi-org-user-cannot-login-via-u-p-if-their-account-is-using-saml-in-another-org/128822/1 "2024-03-04T02:57:16Z")

</div>

We have come across a possible limitation with Universal Login Experience using Identifier First and HRD:

1. User A is part of Org 1 and Org 2.
2. Org 1 is configured to use SAML and Org 2 uses Username-Password-Authentication

When User A visits the New Universal login and enters [userA@company.com](mailto:userA@company.com) they are automatically redirected to the SAML IdP configured for Org 1 and after successfully authenticating, access the the application as Org 1.

This user is never able to authenticate successfully for Org 2 using the New Universal Login experience and HRD because they never make it back to the Organization Picker screen.

The only way to allow this user to login to Org 2 is to have your application supporting the connection url parameter and manually navigate to [app.acme.com/login?connection=Username-Password-Authentication](http://app.acme.com/login?connection=Username-Password-Authentication), however this is a terrible UX for users.

What is the solution for an application user in this scenario to be able to log in to both Organizations independently using the New Universal login

---

<div class="post-metadata">

**Author:** ![ahns](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/ahns/32/59717_2.png) [@ahns](https://community.auth0.com/u/ahns)\
**Post date:** [July 25, 2024, 11:29pm UTC](https://community.auth0.com/t/multi-org-user-cannot-login-via-u-p-if-their-account-is-using-saml-in-another-org/128822/2 "2024-07-25T23:29:18Z")

</div>

Anyone able to provide some clarification on this?

---

<div class="post-metadata">

**Author:** ![ahns](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/ahns/32/59717_2.png) [@ahns](https://community.auth0.com/u/ahns)\
**Post date:** [August 23, 2024, 2:46am UTC](https://community.auth0.com/t/multi-org-user-cannot-login-via-u-p-if-their-account-is-using-saml-in-another-org/128822/3 "2024-08-23T02:46:54Z")

</div>

Found some documentation which appears to indicate that the above scenario should be possible: [Login Flows for Organizations](https://auth0.com/docs/manage-users/organizations/login-flows-for-organizations#identifier-first-authentication) | The step `When a user belongs to more than one organization`

 ![image2](https://global.discourse-cdn.com/auth0/original/3X/2/a/2a7db6a37e52320961386c0b8f3a836af593ba7d.jpeg)

---

<div class="post-metadata">

**Author:** ![vlad.murarasu](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/vlad.murarasu/32/72793_2.png) [@vlad.murarasu](https://community.auth0.com/u/vlad.murarasu)\
**Post date:** [April 15, 2025, 4:16pm UTC](https://community.auth0.com/t/multi-org-user-cannot-login-via-u-p-if-their-account-is-using-saml-in-another-org/128822/5 "2025-04-15T16:16:28Z")

</div>

Hi @ahns,

If this application is supposed to only be accessed by organization members go to Applications \> Applications \> Select your application and select the Organizations tab.

 ![Screenshot 2025-04-15 at 19.14.20](https://global.discourse-cdn.com/auth0/original/3X/3/9/39f982cd1984d569f377b1b868d5120d1578621c.png)

“Prompt for Organization” will let your users choose the organization they’re logging in first, and then ask for their credentials. This way the system won’t get confused anymore.

If you have any other question feel free to reach out.

Have a good one,  
Vlad

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/auth0/original/3X/b/5/b560f266932fcce5d57f09a6595bd50518cae3f3.jpeg) [@system](https://community.auth0.com/u/system)\
**Post date:** [April 29, 2025, 4:17pm UTC](https://community.auth0.com/t/multi-org-user-cannot-login-via-u-p-if-their-account-is-using-saml-in-another-org/128822/6 "2025-04-29T16:17:03Z")

</div>

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.
