Auth0 Error AADSTS9010010 When Logging In With Azure AD and Claude Desktop

When a user logs in via an Entra ID Enterprise Connection using Claude Desktop (Model Context Protocol (MCP) Client), Auth0 generates the following error:

AADSTS9010010: The resource parameter provided in the request doesn't match the requested scopes.

• Auth0
• Azure Active Directory (Azure AD) Enterprise Connection
• Model Context Protocol (MCP)
• Claude Desktop

Claude Desktop uses the resource parameter in the authorization request. By default, Auth0 forwards this parameter to the upstream identity provider (Azure AD). Since Azure AD does not recognize the custom API identifier as a valid resource, Azure AD rejects the request with a mismatch error.

How is the Azure AD login error resolved?

Enable the Resource Parameter Compatibility Profile in the Auth0 tenant to ensure Auth0 uses the resource parameter for token audience handling without forwarding the parameter to upstream identity providers. Navigate to the Auth0 Dashboard, access the advanced settings, and enable the compatibility profile toggle.

1. Navigate to the Auth0 Dashboard.
2. Select Settings, and then select Advanced.
3. Enable the Resource Parameter Compatibility Profile toggle.