Prevent login_hint From Being Sent With ADFS Connection

This article addresses whether an Active Directory Federation Services (ADFS) enterprise connection can be configured to not pass the login hint (login_hint) to the ADFS provider so that it does not appear on the ADFS login page.

• Active Directory Federation Services (ADFS)
• Login Hint

Auth0 passing the login_hint parameter to the upstream Identity Provider (IdP) cannot be changed currently.

To suggest this functionality in a future release of Auth0, please submit a feature request using the Product Feedback form. More information about this process can be found at How to Submit Product Feedback or Feature Requests.

In the meantime, if the ADFS connection is displayed as a button (instead of waiting for the user to enter their email), this parameter will not be sent.

Alternatively, login_hint can be prevented from being sent by aliasing it to another parameter name, as exemplified in Pass Parameters to Identity Providers.

Per the example, the following upstream_params can be set:

{ "screen_name": { "alias": "login_hint" } }

This will result in the login_hint value being passed in the screen_name parameter instead. Therefore, no login_hint parameter will be sent to the IdP. The only issue with this approach is that it still sends a parameter, so it should be set to something the IdP will ignore.