# OpenID by email with restriction by domain, no User Database

**URL:** <https://community.auth0.com/t/openid-by-email-with-restriction-by-domain-no-user-database/193582>\
**Category:** Get Help\
**Tags:** identifier-first, login-experience\
**Created:** [October 24, 2025, 2:33pm UTC](https://community.auth0.com/t/openid-by-email-with-restriction-by-domain-no-user-database/193582 "2025-10-24T14:33:45Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![vladkh](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/vladkh/32/72372_2.png) [@vladkh](https://community.auth0.com/u/vladkh)\
**Post date:** [October 24, 2025, 2:33pm UTC](https://community.auth0.com/t/openid-by-email-with-restriction-by-domain-no-user-database/193582/1 "2025-10-24T14:33:45Z")

</div>

Hello community. I’m a newbie. I am testing Free (Developer) version. I would like to find out if it is possible to follow the scenario below:

1. No User database in Auth0.
2. Users are from three different organizations - dealer1, dealer2, dealer3
3. Every organization has its own domain - [dealer1.net](http://dealer1.net), [dealer2.net](http://dealer2.net), [dealer3.net](http://dealer3.net)
4. Every organization has up to 100 users.
5. Every user has an email - [user1@dealer1.net](mailto:user1@dealer1.net), [user2@dealer2.net](mailto:user2@dealer2.net), [user3@dealer3.net](mailto:user3@dealer3.net) and so on.
6. Authorized access to an external application “[example.net](http://example.net)” with Auth0 OpenID access by entering only a user email.
7. A user which does not have email in that three mentioned above domains is prohibited to have access to “[example.net](http://example.net)”.

In other words - is it possible to setup a login process by entering only email address and allow authorization only for that three domains.

I would appreciate any suggestions, comments, notes etc.  
I beleive I am able to setup an environment to test any version in Free (Developer).

Thank you.

VK

---

<div class="post-metadata">

**Author:** ![gerald.czifra](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/gerald.czifra/32/75301_2.png) [@gerald.czifra](https://community.auth0.com/u/gerald.czifra)\
**Post date:** [October 25, 2025, 2:27am UTC](https://community.auth0.com/t/openid-by-email-with-restriction-by-domain-no-user-database/193582/3 "2025-10-25T02:27:37Z")

</div>

Hi @vladkh

Thank you for reaching out to us!

I’ve read your use case and there are a couple of directions you can take. Please let me know where would your users be stored, will they be stored externally on the IdP side and Auth0 will only serve for login?  
If this is the case, I believe that our [Home Realm Discovery](https://auth0.com/docs/get-started/architecture-scenarios/business-to-business/authentication#hrd-through-universal-login-using-the-email-subdomain:~:text=HRD%20through%20Universal%20Login%20using%20the%20email%20subdomain) feature would work best, as you can request the users to only provide their email address and then redirect them to the appropriate IdP for authentication. This fits well with [Organizations](https://auth0.com/docs/manage-users/organizations) to further ensure company identity and branding, as need may be.

I believe the desired flow can be achieved with the above features, but allow me to provide some additional documentations that could also prove useful:

- [Define Home Realm Discovery identity providers](https://auth0.com/docs/authenticate/login/auth0-universal-login/identifier-first#define-home-realm-discovery-identity-providers:~:text=.-,Define%20Home%20Realm%20Discovery%20identity%20providers,-As%20noted%20above)
- [Home Realm Discovery not Working for Organizations with multiple connections](https://community.auth0.com/t/home-realm-discovery-not-working-for-organizations-with-multiple-connections/126189)
- [Home Realm Discovery for Social Connections](https://support.auth0.com/center/s/article/home-realm-discovery-for-social-connections)
- [Maximum Number of Domains Allowed in Home Realm Discovery for SAML Connections](https://support.auth0.com/center/s/article/Maximum-Number-of-Domains-Allowed-in-Home-Realm-Discovery-for-SAML-Connections)

Hope this helped!  
Gerald

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/auth0/original/3X/b/5/b560f266932fcce5d57f09a6595bd50518cae3f3.jpeg) [@system](https://community.auth0.com/u/system)\
**Post date:** [November 8, 2025, 2:28am UTC](https://community.auth0.com/t/openid-by-email-with-restriction-by-domain-no-user-database/193582/4 "2025-11-08T02:28:11Z")

</div>

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.
