# Passwordless directory dominating Database directory

**URL:** <https://community.auth0.com/t/passwordless-directory-dominating-database-directory/190337>\
**Category:** Get Help\
**Tags:** identifier-first, login-experience\
**Created:** [August 8, 2025, 1:21am UTC](https://community.auth0.com/t/passwordless-directory-dominating-database-directory/190337 "2025-08-08T01:21:51Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![baynezy](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/baynezy/32/49885_2.png) [@baynezy](https://community.auth0.com/u/baynezy)\
**Post date:** [August 8, 2025, 1:21am UTC](https://community.auth0.com/t/passwordless-directory-dominating-database-directory/190337/1 "2025-08-08T01:21:51Z")

</div>

I have an Auth0 tenant that has both the database and passwordless (email) directories configured. The database has existing users and is configured to accept no more registrations. Passwordless is set as the default directory. Authentication profile is set to Identifier First.

When I register new users, they are pushed down the passwordless route. This is my desired outcome. However, if an existing user from the database directory tries to login, then they are sent a code rather than asked for their password. How can I fix this?

---

<div class="post-metadata">

**Author:** ![vlad.murarasu](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/vlad.murarasu/32/72793_2.png) [@vlad.murarasu](https://community.auth0.com/u/vlad.murarasu)\
**Post date:** [August 8, 2025, 1:04pm UTC](https://community.auth0.com/t/passwordless-directory-dominating-database-directory/190337/3 "2025-08-08T13:04:56Z")

</div>

Hi @baynezy,

As specified in this community post, you must create two different `/authorize` links for your users. One sends them to an email/password connection, and the other to a passwordless connection if you want to support both sign-in methods:

> [@Authentication Profile: Routing of password vs passwordless users with Identifier First profile](https://community.auth0.com/t/authentication-profile-routing-of-password-vs-passwordless-users-with-identifier-first-profile/185520/3):
>
> Hi @ampossardt, There is no real way for the system to let you know ahead of time if you are going to use the email with a username/password connection or an email passwordless connection. If there is a database connection in place for your application, that one will always be the default. If no database connection has been setup but a passwordless connection has, then that one will be used. This is done for security reasons. If you want to use both, you’ll have to create two /authorize endpoi…

If you have any other questions, feel free to reach out.

Have a good one,  
Vlad

---

<div class="post-metadata">

**Author:** ![baynezy](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/baynezy/32/49885_2.png) [@baynezy](https://community.auth0.com/u/baynezy)\
**Post date:** [August 8, 2025, 10:30pm UTC](https://community.auth0.com/t/passwordless-directory-dominating-database-directory/190337/4 "2025-08-08T22:30:40Z")

</div>

Thanks @vlad.murarasu - what is the point of the Identity first authentication profile if not to allow both directories to be supported in the same UI?

---

<div class="post-metadata">

**Author:** ![baynezy](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/baynezy/32/49885_2.png) [@baynezy](https://community.auth0.com/u/baynezy)\
**Post date:** [August 8, 2025, 10:32pm UTC](https://community.auth0.com/t/passwordless-directory-dominating-database-directory/190337/5 "2025-08-08T22:32:37Z")

</div>

Also, how would I set up separate `/authorize` links?

---

<div class="post-metadata">

**Author:** ![vlad.murarasu](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/vlad.murarasu/32/72793_2.png) [@vlad.murarasu](https://community.auth0.com/u/vlad.murarasu)\
**Post date:** [August 11, 2025, 4:02pm UTC](https://community.auth0.com/t/passwordless-directory-dominating-database-directory/190337/6 "2025-08-11T16:02:54Z")

</div>

Hi again @baynezy,

1. **“What is the point of the Identity First authentication profile?”**

Its goal is to separate the identifier input field from the password. If Home Realm Discovery is turned on, you can have a specific domain sent straight to, let’s say, the company SSO.

1. **“How would I set up separate `/authorize` links?”**

You can use these docs to learn how they work. In the end, they will look something like: `https://YOUR_DOMAIN/authorize? ... &connection=Username-Password-Authentication`

> **[Auth0 Authentication API](https://auth0.com/docs/api/authentication/implicit-flow/authorize)**

If you use this, you must add the `connection` parameter to specify which connection you want to use. In a way, this would defeat the point of the Universal Login. Since it will send you to a screen with only an email input field. If you have other social connections, they will need to be accessed in the same way, by using the `connection` parameter.

If you have any further questions, feel free to reach out!

Have a good one,  
Vlad

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/auth0/original/3X/b/5/b560f266932fcce5d57f09a6595bd50518cae3f3.jpeg) [@system](https://community.auth0.com/u/system)\
**Post date:** [August 25, 2025, 4:03pm UTC](https://community.auth0.com/t/passwordless-directory-dominating-database-directory/190337/7 "2025-08-25T16:03:09Z")

</div>

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.
