diff --git a/airflow/auth/managers/fab/security_manager/override.py b/airflow/auth/managers/fab/security_manager/override.py
index 2dc023f1daeb5..3814036bb5fd8 100644
--- a/airflow/auth/managers/fab/security_manager/override.py
+++ b/airflow/auth/managers/fab/security_manager/override.py
@@ -2149,7 +2149,7 @@ def get_oauth_user_info(self, provider: str, resp: dict[str, Any]) -> dict[str,
             log.debug("User info from Azure: %s", me)
             # https://learn.microsoft.com/en-us/azure/active-directory/develop/id-token-claims-reference#payload-claims
             return {
-                "email": me["email"],
+                "email": me["upn"] if "upn" in me else me["email"],
                 "first_name": me.get("given_name", ""),
                 "last_name": me.get("family_name", ""),
                 "username": me["oid"],
diff --git a/setup.cfg b/setup.cfg
index 4f7144ca5d92c..47bcddf04c4bb 100644
--- a/setup.cfg
+++ b/setup.cfg
@@ -101,7 +101,7 @@ install_requires =
     # `airflow/www/fab_security` with their upstream counterparts. In particular, make sure any breaking changes,
     # for example any new methods, are accounted for.
     # NOTE! When you change the value here, you also have to update flask-appbuilder[oauth] in setup.py
-    flask-appbuilder==4.3.9
+    flask-appbuilder==4.3.10
     flask-caching>=1.5.0
     flask-login>=0.6.2
     flask-session>=0.4.0
@@ -160,7 +160,9 @@ install_requires =
     # We should also remove "licenses/LICENSE-unicodecsv.txt" file when we remove this dependency
     unicodecsv>=0.14.1
     universal_pathlib>=0.1.4
-    werkzeug>=2.0
+    # Werkzug 3 breaks Flask-Login 0.6.2
+    # we should remove this limitation when FAB supports Flask 2.3
+    werkzeug>=2.0,<3
 
 [options.packages.find]
 include =
diff --git a/setup.py b/setup.py
index 89e07795529a7..2a610b185ff95 100644
--- a/setup.py
+++ b/setup.py
@@ -319,7 +319,7 @@ def write_version(filename: str = str(AIRFLOW_SOURCES_ROOT / "airflow" / "git_ve
 flask_appbuilder_oauth = [
     "authlib>=1.0.0",
     # The version here should be upgraded at the same time as flask-appbuilder in setup.cfg
-    "flask-appbuilder[oauth]==4.3.9",
+    "flask-appbuilder[oauth]==4.3.10",
 ]
 kerberos = [
     "pykerberos>=1.1.13",