One *HUGE* niggle... I would *NEVER* outsource authentication records to a small service like auth0. I have trouble enough trusting Azure's Active Directory hosting, let alone the entire authentication and storing of user account logins.
What happens when/if auth0 folds up shop? What happens to your user accounts?
It's just a recipe for a huge potential risk of failure.