If you encountered the error below, and there is no Idp-initiated session involved, it could be that the request started with the Canonical Domain but completed with a redirect to the Custom Domain. This is also called a domain mismatch.
IdP-Initiated login is not enabled for connection [connection_name]A Canonical Domain is the domain assigned to an auth0 tenant, while a Custom Domain is a domain you own and assigned to your auth0 tenant.
To fix the domain mismatch, ensure that all your configurations must use either Canonical or Custom Domain. Don’t mix them up.