Auth0 Error AADSTS90023 Unsupported Prompt Value With Microsoft Identity Provider

Auth0 generates an error when an application passes multiple values to the OpenID Connect (OIDC) prompt parameter during authentication with a Microsoft Identity Provider (IdP). An invalid parameter configuration causes the issue, as Microsoft does not support multiple prompt values. When an application passes prompt=login,none to a Microsoft social connection, Auth0 propagates the parameter to the upstream IdP. Microsoft rejects the request, and Auth0 displays the following error message:

AADSTS90023: Unsupported 'prompt' value.

• Auth0
• Universal Login
• Custom Login Page
• Microsoft Identity Provider (IdP)
• OpenID Connect (OIDC)

The OpenID Connect (OIDC) specification defines specific behaviors for the prompt parameter. The value login forces the server to display the login user interface, while none forbidding the server from displaying the user interface. Passing prompt=login,none violates Microsoft Identity Provider requirements. Auth0 propagates the URL parameters to the upstream Identity Provider, causing Microsoft to reject the request.

What steps resolve the unsupported prompt value error?

Locate the application code generating the authentication request, remove the prompt parameter, and verify the default session behavior.

1. Locate the application code or URL generating the authentication request.
2. Remove the prompt=login,none parameter from the request URL or the webAuth.authorize() call.
3. Save the changes and verify that Auth0 processes the login without forcing re-authentication when a valid session exists.