# UI Bug: Home Realm Discovery does not show tenant domain if applied via Terraform

**URL:** <https://community.auth0.com/t/ui-bug-home-realm-discovery-does-not-show-tenant-domain-if-applied-via-terraform/190247>\
**Category:** Get Help\
**Tags:** connections, saml-enterprise-connection\
**Created:** [August 6, 2025, 2:34pm UTC](https://community.auth0.com/t/ui-bug-home-realm-discovery-does-not-show-tenant-domain-if-applied-via-terraform/190247 "2025-08-06T14:34:21Z")\
**Posts on this page:** 1\
**Showing post:** 3

<div class="post-metadata">

**Author:** ![gerald.czifra](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/gerald.czifra/32/75301_2.png) [@gerald.czifra](https://community.auth0.com/u/gerald.czifra)\
**Post date:** [August 6, 2025, 4:38pm UTC](https://community.auth0.com/t/ui-bug-home-realm-discovery-does-not-show-tenant-domain-if-applied-via-terraform/190247/3 "2025-08-06T16:38:02Z")

</div>

Hi @billy2

Thank you for reaching out to us!

After reading through your use-case, I did some digging around and it appears that “tenant\_domain” is merged with the “domain\_aliases” array, and the resultant array is what is used for Home Realm Discovery. " tenant\_domain " seems to be more of a legacy field that only accepts a String and is limited to one entry.

Doing some testing with the [Management API](https://auth0.com/docs/api/management/v2/connections/get-connections-by-id), “tenant\_domain” is not automatically created when setting “domain\_aliases”. As you have mentioned, using only `tenant_domain` seems to be working correctly, but it will indeed not list the configured “tenant\_domain” in the connection’s “Identity Provider Domains” box.

My recommendation is to just use the “[domain\_aliases](https://registry.terraform.io/providers/auth0/auth0/latest/docs/resources/connection#domain_aliases-1)” array to record your customer’s email domains that should be routed to the connection in question, and the “tenant\_domain” attribute can be omitted from the configuration. As the connection is working correctly for you, this is solely a UI issue ( which can create confusion).

This was similarly mentioned in the following [Community Post](https://community.auth0.com/t/how-to-add-identity-provider-domains-in-saml-connection-using-terraform/109783) as well, where `domain_aliases` was used in the same fashion instead of `tenant_domain`.

I would also recommend to provide this feedback to our Product team via the [Feedback](https://auth0.com/feedback) page. Others can vote on the suggestion and this can lead to UI improvements and fixed to avoid such confusions in the future.

Hope this helped!  
Gerald

---

_[View the full topic](https://community.auth0.com/t/ui-bug-home-realm-discovery-does-not-show-tenant-domain-if-applied-via-terraform/190247)._
