Unable to Update Client Secret for Azure AD Enterprise Connection

Knowledge Articles
1

Overview

Users may experience an issue while updating the client secret for an Azure AD Enterprise connection through the Auth0 management portal. When attempting to update the client secret from the Auth0 portal, no network calls are made, and the update fails.

Applies To

  • Azure AD Connection

Cause

This occurs because the domain name configured in the Azure AD Enterprise connection does not have a valid top-level domain (TLD), such as .com, .net, or .org.

  • The Auth0 portal performs silent validation on domain names, rejecting domains without a valid TLD. Therefore, when attempting to update the client secret, the portal prevents the update action.
  • However, when using the Management API to update the domain name, no such validation is performed, allowing the domain to be updated successfully even without a TLD, bypassing the validation check.

Solution

To successfully update the client secret, use one of the following approaches:

  1. Use the Management API: Update the client secret via the Management API, which bypasses the TLD validation.
  2. Update the Domain with a Valid TLD: Update the domain name to include a valid TLD (e.g., contoso.com or contoso.net). The portal will then allow the client secret to be updated successfully.