End-of-Life for Extended Attributes in Azure Active Directory (v1) Connections

Overview

Auth0 enterprise connections for Microsoft Azure AD (Entra ID) using the Azure Active Directory (v1) identity API no longer retrieve extended attributes. More specifically, support ended for the following options in (v1) connections:

  • Extended Profile - options.ext_profile.

  • Get user groups - options.ext_groups.

  • Include all the groups the user is a member of, even if the user is not a direct member - options.ext_nested_groups.

For Azure Active Directory (v1) identity API connections, the Dashboard no longer shows these options, and the Management API no longer returns or allows their configuration.

Applies To
  • Microsoft Azure AD Enterprise Connections
  • Azure Active Directory (v1) Identity API
  • Extended attributes
Cause
Connections using the Azure Active Directory (v1) identity API relied on requests to Azure AD Graph API endpoints when extended attributes options were enabled. Since Microsoft deprecated and retired the Azure AD Graph API, Auth0 removed the dependent features in (v1) connections starting April 14, 2026.
Solution

For equivalent functionality, update the connection to target the Microsoft Identity Platform (v2) identity API. This action ensures that Microsoft Graph API endpoints are used instead of the deprecated Azure AD Graph API when retrieving extended attributes information.

Even if extended attributes retrieval is not required, the general recommendation is to transition connections to the Microsoft Identity Platform (v2) identity API.

Recommended content

No recommended content found...