Home Realm Discovery Fails for Okta Workforce Connection Using Classic Universal Login

Last Updated: Feb 20, 2026

Overview

This article clarifies why Home Realm Discovery (HRD) fails to function for an Okta Workforce Enterprise connection when the system uses the Classic Universal Login experience with Lock.js. Other Enterprise connections work correctly, but when a user enters an email address configured for HRD in the Okta Workforce connection, the password input field remains visible.

Applies To

Classic Universal Login
Lock
Home Realm Discovery (HRD)
Okta Workforce Enterprise connection

Cause

The Okta Workforce Connection type is a relatively new feature in Auth0 and is only supported in Lock.js v11.34 or greater, as it shows in the corresponding release note.

Solution

To resolve the issue and enable Home Realm Discovery (HRD) for the Okta Workforce Enterprise connection, update the Lock.js library version.

Navigate to the Branding page in the Auth0 Dashboard.
Update the current Lock.js version to the latest available version in the template code:

The latest updates are available in the GitHub documentation.

NOTE: Once the customization toggle is enabled for a given Universal Login page, Auth0 no longer automatically updates the page. The Auth0 Tenant Admin is responsible for updating and maintaining the page, including the version numbers for any included Auth0 Software Development Kit (SDK) or widget.