Converting from local IFS authentication to Single Sign-On, where users currently log in with their Windows/email account rather than the IFS Identity's initials-plus-surname format — does every user account need to be recreated to match the new login format?

All FAQ questions / Security and access

Answer

No — existing IFS user accounts (their IFS Identity/User Name) don't need to be recreated at all. Once SSO is configured, point each existing user at their domain account by setting the Directory ID field on their user record to their Windows/Active Directory account name (typically their email address) — the IFS Identity stays whatever it already was, and only the Directory ID mapping needs to be populated for SSO to resolve the login correctly.

Documentation-based answer. Confirm the product and release before applying it. This answer has not been verified in an IFS environment.

← Browse Security and access questions