Migrating users to single sign-on

If you have set up SSO for your Customer Area, you can migrate these users to SSO. After migration, they must use SSO to log in to the Customer Area.

Adyen does not require you to migrate your users to SSO. You can decide to migrate some or all of your users.

You must migrate test Customer Area and live Customer Area users separately. If a user completes the migration process in the test Customer Area, it only allows them to use SSO for the test Customer Area.

If a user uses the same email address for multiple company accounts, then they can access only one company account after migrating to SSO. To access multiple company accounts, the user must do one of the following:

• Use a different email address for each company account before migrating to SSO.
• Use a username, account, and password to login, instead of migrating to SSO.

Requirements

Before you can migrate your users, do the following:

• Set up SSO for your Customer Area company account.
• Make sure that you have one of the following roles:
  • Merchant admin
  • Merchant user management

Manage migration for users

1. In your Customer Area, go to the Manage user migration panel.
2. Go to Settings > Users.
3. Select Manage user migration.

In the panel, you can do the following:

• Download a report with the migration statuses of users.
• Download a report with the users that do not have a unique email address.
• Start migration for users.
• Cancel migration for users.

Migration statuses

A user can have one of the following migration statuses:

• Requires review:
  For users whose migration requires review, the migration status report shows the following values in the Reason column:
  • EMAIL_ADDRESS_ALREADY_IN_USE: the user's email address is being used by more than one account in the Customer Area. To migrate a user to SSO, their email address must be assigned to only one user. You must change the duplicate email addresses before migrating the user. If you do not know which company account the duplicate user belongs to, or if they belong to another organization, reach out to our Support Team with the user in CC.
  • SELECTED_MIGRATION_UNAVAILABLE: the user's email address is being used by a separate email user within the same organization (but not in the same company). Within the same organization, you cannot have an SSO user and email user with the same email address. You must first change the email user's login method before proceeding with the current migration.
• Ready to migrate:
  You can start migration for the user.
• Pending migration:
  You started migration for the user, and they must complete the steps.

Change duplicate email addresses

To migrate a user to SSO, their email address must be assigned to only one user, because it becomes their username. If you are migrating a user, but their email is being used by more than one account, you must change the email for this user.

1. In your Customer Area, go to Settings > Users.
2. In the user list, select the user whose email address you want to change.
3. On the user details page, select Edit icon.
4. Change the email address for the user.
5. Select Save to complete the process.

We send a verification email to the user's new email address, and you can start migration for them. They verify their email address during the migration process.

Start a migration

A user can log in to the Customer Area with one of the following methods:

• Username.
• Email address.

The process of migration depends on how a user logs in.

Cancel a migration

You can cancel a user's migration only if they have not completed the steps of the migration process. Reasons for canceling the process include the following:

• Your identity provider is not working and making it impossible for your user to be migrated to SSO.
• The migration is not working, and you want the user to be able to access the Customer Area.

Restarting a canceled migration is possible at any time, by starting the migration again.

If you have questions or feedback, get in touch with your Adyen contact.