Unable To Verify Email When Using Azure AD (Microsoft Entra ID) Connections

Overview

When configuring an Azure AD (Microsoft Entra ID) connection in Auth0, logins may fail, or users may appear with unverified email addresses. For example, after a successful Azure AD connection, authentication may not complete because the email_verified flag remains false. This behavior can prevent successful logins.

Applies To

  • Enterprise Connections
  • Microsoft Entra ID

Solution

If users from Azure AD are trusted as already verified, follow these steps:

  1. Sign in to the Dashboard.

  2. Choose Authentication > Enterprise > Microsoft Entra ID (Azure AD).

  3. Open the connection settings.

  4. Go to the Advanced Settings section and select "Always set email_verified to 'true'" for the Email Verification property.

Advanced Settings - Email Verification option set to Always set email_verified to 'true'

 

If automatically trusting that Active Directory (AD) users are verified is not a viable option, implement a user verification flow. For more information, see Handling External User Verification with Auth0 Forms.

See Email Verification for Azure AD and ADFS for more information.

Recommended content

No recommended content found...