Users with Work Emails are Able to Login with Microsoft Social Connection

Overview

The Microsoft social connection should allow only personal Microsoft accounts to log in. However, users with work email addresses are also logging in.

Cause

Microsoft allows the creation of personal accounts with work email addresses as described in this document.

Due to this, a “personal” account can still have a work email address and can log in through the Microsoft social connection.

Solution

It is not possible to prevent this from happening from an Auth0 perspective.