After an Active Directory domain rename, users' Directory ID and email update correctly on the User Details screen in IFS Cloud, but the associated IAM User account (created for SSO) doesn't change and users can no longer log in with their new AD identity. Is deleting the stale IAM User record the right fix?

All FAQ questions / Security and access

Answer

Yes — deleting the IAM User record is the correct approach whenever the underlying identity provider configuration changes for a user (such as an AD domain rename). Once deleted, the next successful login automatically creates a new, correctly-linked IAM User account reflecting the current IdP identity, which then shows up on the User Details screen in place of the stale one.

Documentation-based answer. Confirm the product and release before applying it. This answer has not been verified in an IFS environment.

← Browse Security and access questions