# \#azure-ad-enterprise-connection

**URL:** https://community.auth0.com/tag/azure-ad-enterprise-connection/1925.md

[Latest](https://community.auth0.com/latest.md) · [Categories](https://community.auth0.com/categories.md) · [Tags](https://community.auth0.com/tags.md)

---

## [No connections enabled for the organization are visible](https://community.auth0.com/t/no-connections-enabled-for-the-organization-are-visible/197072)

<div class="topic-metadata">

**Author:** [@Skwiggs](https://community.auth0.com/u/Skwiggs)\
**Replies:** 4\
**Last updated:** [February 14, 2026, 1:07pm UTC](https://community.auth0.com/t/no-connections-enabled-for-the-organization-are-visible/197072 "2026-02-14T13:07:15Z")

</div>

I’m a complete beginner when it comes to Auth0… I’ve setup: A tenant for our company In this this tenant, a new App for our backend An org for one of our customers For this org, an Azure AD connection I believe this s…

---

## [Best way for users to link their Azure AD account](https://community.auth0.com/t/best-way-for-users-to-link-their-azure-ad-account/196762)

<div class="topic-metadata">

**Author:** [@harry5](https://community.auth0.com/u/harry5)\
**Replies:** 3\
**Last updated:** [February 4, 2026, 7:40pm UTC](https://community.auth0.com/t/best-way-for-users-to-link-their-azure-ad-account/196762 "2026-02-04T19:40:29Z")

</div>

Details: Platform is invite only All users will have Username-Password-Authentication primary accounts Some users may want to link their accounts to their Azure AD/Entra ID company accounts They can then use a SSO Entr…

---

## [Deprovisioning with New Azure AD and SCIM](https://community.auth0.com/t/deprovisioning-with-new-azure-ad-and-scim/195502)

<div class="topic-metadata">

**Author:** [@swarner1033](https://community.auth0.com/u/swarner1033)\
**Replies:** 3\
**Last updated:** [December 17, 2025, 9:53pm UTC](https://community.auth0.com/t/deprovisioning-with-new-azure-ad-and-scim/195502 "2025-12-17T21:53:10Z")

</div>

I’ve set up 2 seperate Enterprise Applications in EntraID, one for Azure OIDC and one for SCIM as per Inbound SCIM for New Azure AD Connections If the user is removed from the SCIM app they’ll no longer have a role in m…

---

## [EntraID login requests' URL pattern?](https://community.auth0.com/t/entraid-login-requests-url-pattern/195568)

<div class="topic-metadata">

**Author:** [@yoavCy](https://community.auth0.com/u/yoavCy)\
**Replies:** 1\
**Last updated:** [December 17, 2025, 7:32pm UTC](https://community.auth0.com/t/entraid-login-requests-url-pattern/195568 "2025-12-17T19:32:07Z")

</div>

I’m setting up an EntraID enterprise connection through auth0. I’m already familiar with the allow list. However, I’d like to understand if the communication from auth0 servers to the EntraID server(s) have any specific…

---

## [Some Active Directory users missing group\_ids](https://community.auth0.com/t/some-active-directory-users-missing-group-ids/194752)

<div class="topic-metadata">

**Author:** [@leonm](https://community.auth0.com/u/leonm)\
**Replies:** 1\
**Last updated:** [November 26, 2025, 5:24pm UTC](https://community.auth0.com/t/some-active-directory-users-missing-group-ids/194752 "2025-11-26T17:24:23Z")

</div>

Hi, We have an enterprise connection setup to an Active Directory instance of one of our customer. The connection has been established for about a year now, and we have written a custom Rule allowing us to get the AD gr…

---

## [Failed to obtain access token - How to identify the connection name](https://community.auth0.com/t/failed-to-obtain-access-token-how-to-identify-the-connection-name/194323)

<div class="topic-metadata">

**Author:** [@peter.cowen](https://community.auth0.com/u/peter.cowen)\
**Replies:** 3\
**Last updated:** [November 12, 2025, 6:38pm UTC](https://community.auth0.com/t/failed-to-obtain-access-token-how-to-identify-the-connection-name/194323 "2025-11-12T18:38:24Z")

</div>

We are seeing ‘Failed to obtain access token’ and we have a number of connections configured for Azure AD (EntraID). The log message only gives you the client ID. Is there a way to use the clientID in the log to locate w…

---

## [Different organizations Login with microsoft](https://community.auth0.com/t/different-organizations-login-with-microsoft/107797)

<div class="topic-metadata">

**Author:** [@Kiwi](https://community.auth0.com/u/Kiwi)\
**Replies:** 3\
**Last updated:** [July 30, 2025, 10:15am UTC](https://community.auth0.com/t/different-organizations-login-with-microsoft/107797 "2025-07-30T10:15:10Z")

</div>

Dear fellow devs, We’re currently creating a SaaS for bigger companies, mainly focussed on companies that use the MS AAD. We would like our app to be displayed on different subdomains, for example: company1.oursaas.co…

---

## [When using an enterprise IdP, when are changes on the IdP side reflected in the access token issued by Auth0?](https://community.auth0.com/t/when-using-an-enterprise-idp-when-are-changes-on-the-idp-side-reflected-in-the-access-token-issued-by-auth0/189550)

<div class="topic-metadata">

**Author:** [@ggulyas](https://community.auth0.com/u/ggulyas)\
**Replies:** 4\
**Last updated:** [July 23, 2025, 3:16pm UTC](https://community.auth0.com/t/when-using-an-enterprise-idp-when-are-changes-on-the-idp-side-reflected-in-the-access-token-issued-by-auth0/189550 "2025-07-23T15:16:58Z")

</div>

In an Enterprise Connection setup (e.g., SAML or LDAP), are changes like role revocation or user deletion at the IdP reflected in the access token during refresh token flows, or only after a full re-authentication?" In …

---

## [How to Restrict a Microsoft Azure AD Enterprise Connection to a Specific Organization in Auth0?](https://community.auth0.com/t/how-to-restrict-a-microsoft-azure-ad-enterprise-connection-to-a-specific-organization-in-auth0/187773)

<div class="topic-metadata">

**Author:** [@stanley.ramakrishnan](https://community.auth0.com/u/stanley.ramakrishnan)\
**Replies:** 1\
**Last updated:** [June 9, 2025, 6:02pm UTC](https://community.auth0.com/t/how-to-restrict-a-microsoft-azure-ad-enterprise-connection-to-a-specific-organization-in-auth0/187773 "2025-06-09T18:02:40Z")

</div>

Hi team, We’re implementing a B2B multi-tenant architecture using Auth0 Organizations and Microsoft Azure AD Enterprise Connections. Our goal is to restrict a specific Azure AD connection (e.g., tied to a customer’s te…

---

## [ELI5: What counts as an "Enterprise Connection"?](https://community.auth0.com/t/eli5-what-counts-as-an-enterprise-connection/186408)

<div class="topic-metadata">

**Author:** [@jirro.reoloso](https://community.auth0.com/u/jirro.reoloso)\
**Replies:** 2\
**Last updated:** [May 7, 2025, 5:27pm UTC](https://community.auth0.com/t/eli5-what-counts-as-an-enterprise-connection/186408 "2025-05-07T17:27:41Z")

</div>

Hello! Was wondering what counts as an enterprise connection? We have set up only one Azure AD (multi tenant) connection, we’ve gotten log ins from 3 different domains through it (1 internal, 2 beta test clients) + a cou…

---

## [How to allow all types of account in microsoft auth0 enterprise connection,](https://community.auth0.com/t/how-to-allow-all-types-of-account-in-microsoft-auth0-enterprise-connection/185931)

<div class="topic-metadata">

**Author:** [@ali6](https://community.auth0.com/u/ali6)\
**Replies:** 1\
**Last updated:** [April 25, 2025, 12:38pm UTC](https://community.auth0.com/t/how-to-allow-all-types-of-account-in-microsoft-auth0-enterprise-connection/185931 "2025-04-25T12:38:05Z")

</div>

We used Microsoft socials connection initially on our auth0 app which worked fine for personal accounts but didn’t allow work accounts, we switched to enterprise connection to allow work accounts. \*\*Accounts in any organ…

---

## [Microsoft login issue account needs to be added as external tenant](https://community.auth0.com/t/microsoft-login-issue-account-needs-to-be-added-as-external-tenant/185204)

<div class="topic-metadata">

**Author:** [@ali6](https://community.auth0.com/u/ali6)\
**Replies:** 1\
**Last updated:** [April 9, 2025, 1:38pm UTC](https://community.auth0.com/t/microsoft-login-issue-account-needs-to-be-added-as-external-tenant/185204 "2025-04-09T13:38:19Z")

</div>

Ready to post? :magnifying\_glass\_tilted\_left: First, try searching for your answer. We are using auth0 login and signup for our react app to allow users to signup. It has the google and Microsoft logins integrated into …

---

## [SSO application to have both DB connection and Azure connection](https://community.auth0.com/t/sso-application-to-have-both-db-connection-and-azure-connection/183277)

<div class="topic-metadata">

**Author:** [@carllabuschagne](https://community.auth0.com/u/carllabuschagne)\
**Replies:** 10\
**Last updated:** [March 19, 2025, 10:42am UTC](https://community.auth0.com/t/sso-application-to-have-both-db-connection-and-azure-connection/183277 "2025-03-19T10:42:14Z")

</div>

Is it possible to set up an application to use a DB username password and Azure AD connection? If I activate both, I only see the username and password and not the Azure option? If I turn off the DB connection, then I se…

---

## [Connecting AzureAD that's behind a firewall](https://community.auth0.com/t/connecting-azuread-thats-behind-a-firewall/183764)

<div class="topic-metadata">

**Author:** [@yoavCy](https://community.auth0.com/u/yoavCy)\
**Replies:** 2\
**Last updated:** [March 13, 2025, 8:33am UTC](https://community.auth0.com/t/connecting-azuread-thats-behind-a-firewall/183764 "2025-03-13T08:33:22Z")

</div>

I’d like to add an Enterprise Connection to a Microsoft Azure AD server (AKA Microsoft Entra ID) Since that server is behind a firewall, which addresses and ports (or any other configuration) should I allow in its firew…

---

## [Auth0 App dropping group claims from Azure OIDC connector](https://community.auth0.com/t/auth0-app-dropping-group-claims-from-azure-oidc-connector/183235)

<div class="topic-metadata">

**Author:** [@mpatnode](https://community.auth0.com/u/mpatnode)\
**Replies:** 2\
**Last updated:** [March 4, 2025, 6:02pm UTC](https://community.auth0.com/t/auth0-app-dropping-group-claims-from-azure-oidc-connector/183235 "2025-03-04T18:02:15Z")

</div>

Ready to post? :mag: First, try searching for your answer. I have a fairly simple configuration where I want to authenticate my corporate users from Entra ID, but keep our clients in an Auth0 database. I created an ap…

---

## [Group ids from azure AD in post login actions](https://community.auth0.com/t/group-ids-from-azure-ad-in-post-login-actions/128066)

<div class="topic-metadata">

**Author:** [@rohith.udupa](https://community.auth0.com/u/rohith.udupa)\
**Replies:** 1\
**Last updated:** [March 4, 2025, 5:55pm UTC](https://community.auth0.com/t/group-ids-from-azure-ad-in-post-login-actions/128066 "2025-03-04T17:55:12Z")

</div>

We have Azure AD enterprise connection in auth0. The applications we have expect groupids instead of group names from azure. I cant seem to find a way to map groupids in incoming connection. I tried print user.groups fr…

---

## [HRD Redirect Affecting All Organizations with Same Email Domain - Expected Behavior or Misconfiguration?](https://community.auth0.com/t/hrd-redirect-affecting-all-organizations-with-same-email-domain-expected-behavior-or-misconfiguration/138495)

<div class="topic-metadata">

**Author:** [@bjornhansen](https://community.auth0.com/u/bjornhansen)\
**Replies:** 3\
**Last updated:** [February 28, 2025, 8:10pm UTC](https://community.auth0.com/t/hrd-redirect-affecting-all-organizations-with-same-email-domain-expected-behavior-or-misconfiguration/138495 "2025-02-28T20:10:47Z")

</div>

I’m using Organizations with Home Realm Discovery and Identifier First authentication profile. I would expect the HRD to only apply to organizations where the given connection is enabled. However, when I enable the conne…

---

## [Auth0 as the Social Login When Using Azure Entra as the IDP](https://community.auth0.com/t/auth0-as-the-social-login-when-using-azure-entra-as-the-idp/182964)

<div class="topic-metadata">

**Author:** [@matthew.hartz](https://community.auth0.com/u/matthew.hartz)\
**Replies:** 1\
**Last updated:** [February 28, 2025, 5:35pm UTC](https://community.auth0.com/t/auth0-as-the-social-login-when-using-azure-entra-as-the-idp/182964 "2025-02-28T17:35:39Z")

</div>

Ready to post? :mag: First, try searching for your answer. Hi, I’ve seen some posts on how to do the inverse, where you could go open the auth0 lock and see your Azure Entra account as a social login. What my goal is …

---

## [Getting Azure Tenant Id from Enterprise Connection](https://community.auth0.com/t/getting-azure-tenant-id-from-enterprise-connection/102651)

<div class="topic-metadata">

**Author:** [@jonathan.wilson](https://community.auth0.com/u/jonathan.wilson)\
**Replies:** 4\
**Last updated:** [September 30, 2024, 3:03pm UTC](https://community.auth0.com/t/getting-azure-tenant-id-from-enterprise-connection/102651 "2024-09-30T15:03:34Z")

</div>

Hello, I have Azure AD authentication configured through a Microsoft Azure AD Enterprise Connection. This is working well and I would like to add the users’ Azure AD tenantid property as a custom claim. The Raw JSON f…

---

## [Using Auth0 to access Microsoft PowerBI](https://community.auth0.com/t/using-auth0-to-access-microsoft-powerbi/142250)

<div class="topic-metadata">

**Author:** [@aliciabre21](https://community.auth0.com/u/aliciabre21)\
**Replies:** 1\
**Last updated:** [September 2, 2024, 10:29am UTC](https://community.auth0.com/t/using-auth0-to-access-microsoft-powerbi/142250 "2024-09-02T10:29:08Z")

</div>

Microsoft PowerBI requires an Azure AD B2C (Entra ID) to access their PowerBI Embedded tool. Our enterprise company is migrating to Auth0, and this presents a challenge. Is it possible to authenticate with Auth0 and then…

---

## [User-Limit per connection](https://community.auth0.com/t/user-limit-per-connection/136775)

<div class="topic-metadata">

**Author:** [@j.krabs](https://community.auth0.com/u/j.krabs)\
**Replies:** 2\
**Last updated:** [June 24, 2024, 5:35am UTC](https://community.auth0.com/t/user-limit-per-connection/136775 "2024-06-24T05:35:52Z")

</div>

Hi Team, are there any limitations on how many users can be stored in a single connection? - Especially in an enterprise-connection? From this link I would expect there is no limit: Entity Limit Policy (auth0.com)

---

## [Import Users from AD to Auth0 for SSO](https://community.auth0.com/t/import-users-from-ad-to-auth0-for-sso/131850)

<div class="topic-metadata">

**Author:** [@srinivas2](https://community.auth0.com/u/srinivas2)\
**Replies:** 4\
**Last updated:** [July 19, 2024, 6:16pm UTC](https://community.auth0.com/t/import-users-from-ad-to-auth0-for-sso/131850 "2024-07-19T18:16:39Z")

</div>

My application is using Auth0 for authenticating the users. For a client we are trying to do SSO with their Azure Active Directory. Registered an Application in the Azure and provided the required information regarding …

---

## [Is there a way to trigger Enterprise SSO using some function in the template of New Universal Login](https://community.auth0.com/t/is-there-a-way-to-trigger-enterprise-sso-using-some-function-in-the-template-of-new-universal-login/122442)

<div class="topic-metadata">

**Author:** [@raja.sk](https://community.auth0.com/u/raja.sk)\
**Replies:** 1\
**Last updated:** [December 8, 2023, 11:17am UTC](https://community.auth0.com/t/is-there-a-way-to-trigger-enterprise-sso-using-some-function-in-the-template-of-new-universal-login/122442 "2023-12-08T11:17:12Z")

</div>

I’m trying to introduce a link in the HTML template of the new Universal Login and trigger the Azure AD SSO connection login. Is there any function that I can call from the template to trigger SSO login?

---

## [Customise the Classic Universal Login page for Azure AD](https://community.auth0.com/t/customise-the-classic-universal-login-page-for-azure-ad/120807)

<div class="topic-metadata">

**Author:** [@danielkilev](https://community.auth0.com/u/danielkilev)\
**Replies:** 3\
**Last updated:** [November 21, 2023, 2:09pm UTC](https://community.auth0.com/t/customise-the-classic-universal-login-page-for-azure-ad/120807 "2023-11-21T14:09:42Z")

</div>

Hi, we have multiple applications that use the same Classic Universal Login page. What we want to do is, for a specific application (that happens to be the only application that is configured to use an Enterprise Databa…

---

## [Authentication API + AzureAD Connector + Customer MFA](https://community.auth0.com/t/authentication-api-azuread-connector-customer-mfa/118854)

<div class="topic-metadata">

**Author:** [@jrothamel](https://community.auth0.com/u/jrothamel)\
**Replies:** 3\
**Last updated:** [October 25, 2023, 1:41pm UTC](https://community.auth0.com/t/authentication-api-azuread-connector-customer-mfa/118854 "2023-10-25T13:41:44Z")

</div>

We have a scenario with a custom application. The application uses the Auth0 authentication API to handle all back-end authentication/session management. We have an Auth0 connector pointing to the customer’s AzureAD envi…

---

## [IdP Initiated SSO with Universal Login or Passwordless Connections](https://community.auth0.com/t/idp-initiated-sso-with-universal-login-or-passwordless-connections/115797)

<div class="topic-metadata">

**Author:** [@erik-guerrero\_gmf](https://community.auth0.com/u/erik-guerrero_gmf)\
**Replies:** 3\
**Last updated:** [September 13, 2023, 1:21pm UTC](https://community.auth0.com/t/idp-initiated-sso-with-universal-login-or-passwordless-connections/115797 "2023-09-13T13:21:06Z")

</div>

Does Auth0 support Azure AD as the IdP (native, saml, oidc) where alternative SSO login methods such as phone number, user name, or fingerprints are allowed? I would like to login using a phone number instead of an emai…

---

## [What is the parameter should I pass to indicate IDP connection](https://community.auth0.com/t/what-is-the-parameter-should-i-pass-to-indicate-idp-connection/115732)

<div class="topic-metadata">

**Author:** [@mkandasamy](https://community.auth0.com/u/mkandasamy)\
**Replies:** 3\
**Last updated:** [September 11, 2023, 6:40pm UTC](https://community.auth0.com/t/what-is-the-parameter-should-i-pass-to-indicate-idp-connection/115732 "2023-09-11T18:40:53Z")

</div>

What is the parameter that I should pass when authorizing user to indicate the idp connection?

---

## [Migrate users from ADFS to Azure AD](https://community.auth0.com/t/migrate-users-from-adfs-to-azure-ad/111765)

<div class="topic-metadata">

**Author:** [@functionscope](https://community.auth0.com/u/functionscope)\
**Replies:** 3\
**Last updated:** [August 7, 2023, 8:43am UTC](https://community.auth0.com/t/migrate-users-from-adfs-to-azure-ad/111765 "2023-08-07T08:43:26Z")

</div>

Hi, We have around 20 database connections in Auth0 and a couple that are ADFS. One of our ADFS customers is going to be migrating to Azure AD. Is there an approach that will allow us to migrate users in Auth0 using A…

---

## [Microsoft Azure AD connection no connection enabled for this client error](https://community.auth0.com/t/microsoft-azure-ad-connection-no-connection-enabled-for-this-client-error/110562)

<div class="topic-metadata">

**Author:** [@donniekerr01](https://community.auth0.com/u/donniekerr01)\
**Replies:** 3\
**Last updated:** [July 7, 2023, 5:24pm UTC](https://community.auth0.com/t/microsoft-azure-ad-connection-no-connection-enabled-for-this-client-error/110562 "2023-07-07T17:24:43Z")

</div>

My Azure AD connection is enabled for my application, but I get “no connection enabled for this client” error and the redirect does not work. Testing the connection works fine in the Try. If I go to Login Experience an…

---

## [AzureAD fields in Auth0 Actions](https://community.auth0.com/t/azuread-fields-in-auth0-actions/109816)

<div class="topic-metadata">

**Author:** [@gshand](https://community.auth0.com/u/gshand)\
**Replies:** 2\
**Last updated:** [June 30, 2023, 6:56pm UTC](https://community.auth0.com/t/azuread-fields-in-auth0-actions/109816 "2023-06-30T18:56:31Z")

</div>

I’m curious if there are any updates to this topic How to access user.groups in Actions?. The Rules API is being deprecated, so it sounds like this is no longer a viable solution. PS sorry for duplicating the topic, I …

[Next page](https://community.auth0.com/tag/azure-ad-enterprise-connection/1925.md?match_all_tags=true&page=1&tags%5B%5D=azure-ad-enterprise-connection)
