Auth0 Support Center - Groups with Azure AD Enterprise Connection

Groups with Azure AD Enterprise Connection

Sep 10, 2025

Overview

This article explains how to get the groups array to populate with an Azure AD Enterprise Connection.

Applies To

Solution

The following configurations work to populate the groups array in the Auth0 user profile with an Azure AD Enterprise connection:

Identity API: Azure Active Directory (v1) + Protocol: OpenID Connect + Extended Attributes: Get user groups
Identity API: Microsoft Identity Platform (v2) + Extended Attributes: Get user groups

The groups array will not populate with:

Identity API: Azure Active Directory (v1) + Protocol: WS Federation + Extended Attributes: Get user groups