---
title: "Migrating users to single sign-on"
description: "Allow your existing users access to the Customer Area using single sign-on (SSO)."
url: "https://docs.adyen.com/account/single-sign-on/migrate-users-to-sso"
source_url: "https://docs.adyen.com/account/single-sign-on/migrate-users-to-sso.md"
canonical: "https://docs.adyen.com/account/single-sign-on/migrate-users-to-sso"
last_modified: "2023-07-13T11:07:00+02:00"
language: "en"
---

# Migrating users to single sign-on

Allow your existing users access to the Customer Area using single sign-on (SSO).

[View source](/account/single-sign-on/migrate-users-to-sso.md)

If you have [set up SSO for your Customer Area](/account/single-sign-on/set-up-sso), you can migrate these users to SSO. After migration, they must use SSO to log in to the Customer Area.

Adyen does not require you to migrate your users to SSO. You can decide to migrate some or all of your users.

You must migrate [test Customer Area](https://ca-test.adyen.com/) and [live Customer Area](https://ca-live.adyen.com/) users separately. If a user completes the migration process in the test Customer Area, it only allows them to use SSO for the test Customer Area.

If a user uses the same email address for multiple company accounts, then they can access only one company account after migrating to SSO. To access multiple company accounts, the user must do one of the following:

* Use a different email address for each company account before migrating to SSO.
* Use a username, account, and password to login, instead of migrating to SSO.

## Requirements

Before you can migrate your users, do the following:

* [Set up SSO for your Customer Area company account](/account/single-sign-on/set-up-sso).

* Make sure that you have one of the following [roles](/account/user-roles):

  * **Merchant admin**
  * **Merchant user management**

## Manage migration for users

1. In your Customer Area, go to the **Manage user migration panel**.
2. Go to **Account** > **Users**.
3. Select **Manage user migration**.

In the panel, you can do the following:

* Download a report with the [migration statuses](#migration-statuses) of users.
* Download a report with the [users that do not have a unique email address](#user-requirements).
* [Start migration for users](#start-migration).
* [Cancel migration for users](#cancel-migration).

### Migration statuses

A user can have one of the following migration statuses:

* **Requires review**:\
  For users whose migration requires review, the migration status report shows the following values in the **Reason** column:

  * **EMAIL\_ADDRESS\_ALREADY\_IN\_USE**: the user's email address is being used by more than one account in the Customer Area. To migrate a user to SSO, their email address must be assigned to only one user. You must [change the duplicate email addresses](#change-duplicate-email-addresses) before migrating the user. If you do not know which company account the duplicate user belongs to, or if they belong to another organization, reach out to our [Support Team](https://ca-test.adyen.com/ca/ca/contactUs/support.shtml?form=other) with the user in the CC field.
  * **SELECTED\_MIGRATION\_UNAVAILABLE**: the user's email address is being used by a separate email user within the same organization (but not in the same company). Within the same organization, you cannot have an SSO user and email user with the same email address. You must first change the email user's login method before proceeding with the current migration.

* **Ready to migrate**:\
  You can start migration for the user.

* **Pending migration**:\
  You started migration for the user, and they must complete the steps.

### Change duplicate email addresses

To migrate a user to SSO, their email address must be assigned to only one user, because it becomes their username. If you are migrating a user, but their email is being used by more than one account, you must change the email for this user.

1. In your Customer Area, go to **Account** > **Users**.
2. In the user list, select the user whose email address you want to change.
3. On the user details page, select **Edit icon**.
4. Change the email address for the user.
5. Select **Save** to complete the process.

We send a verification email to the user's new email address, and you can start migration for them. They verify their email address during the migration process.

## Start a migration

A user can log in to the Customer Area with one of the following methods:

* Username.
* Email address.

The process of migration depends on how a user logs in.

### Tab: Username

You can [migrate individual users](#individual) or [migrate multiple users at a time](#multiple).

### Migrate an individual user

1. In your Customer Area, go to **Account** > **Users**.
2. In the user list, select the user you want to migrate.
3. Select **Start migration**.

The user receives an email to complete the required steps for migration.

The next time the user logs in to the Customer Area, they are prompted to complete the migration. The user needs to login with their **previous credentials** to complete the migration.

The user cannot access the Customer Area until they complete the migration. When the user completes migration, we send them a confirmation email with their new SSO credentials. After this, the user cannot access the Customer Area with their previous credentials.

You can verify that their new login method is updated to SSO on the **Users** page.

### Migrate multiple users at a time

We recommend that you notify users that you started SSO migration for them, because we do email your users when you start migrating multiple users.

1. In your Customer Area, go to **Account** > **Users**.
2. Select **Manage user migration**.
3. In the **Ready to migrate** box, select **SSO** under login method, and then select **Start migration**.
4. Select **Start bulk migration**.

You get a pop-up message that tells you if the migration was successfully started.

The next time the user logs in to the Customer Area, they are prompted to complete the migration. The user needs to login with their **previous credentials** to complete the migration.

The user cannot access the Customer Area until they complete the migration. When the user completes migration, we send them a confirmation email with their new SSO credentials. After this, the user cannot access the Customer Area with their previous credentials.

You can verify that their new login method is updated to SSO on the **Users** page.

### Tab: Email address

Some users log in with their email address and password. You can migrate a user that logs in with their email address by doing the following:

1. In your Customer Area, go to **Account** > **Users**.
2. In the user list, select the user you want to migrate.
3. Under **User details**, enter the **First name** and **Last name**.
4. Under **Login method**, select **SSO via \[YOUR\_COMPANY\_ACCOUNT\_NAME]**.
5. Select **Save**.

The user receives an email to complete the required steps for migration.

The next time the user logs in to the Customer Area, they are prompted to complete the migration. The user needs to login with their **previous credentials** to complete the migration.

The user cannot access the Customer Area until they complete the migration. When the user completes migration, we send them a confirmation email with their new SSO credentials. After this, the user cannot access the Customer Area with their previous credentials.

You can change the user's login method from SSO back to email at any time.

1. In your Customer Area, go to **Account** > **Users**.
2. In the user list, select the user you want to migrate.
3. Under **Login method**, select **Email**.

## Cancel a migration

You can cancel a user's migration only if they have not completed the steps of the migration process. Reasons for canceling the process include the following:

* Your identity provider is not working and making it impossible for your user to be migrated to SSO.
* The migration is not working, and you want the user to be able to access the Customer Area.

Restarting a canceled migration is possible at any time, by [starting the migration](#start-migration) again.

### Tab: Cancel migration for an individual user

1. In your Customer Area, go to **Account** > **Users**.
2. In the user list, select the user for whom you want to cancel the migration.
3. On the user details page, select **Cancel migration**.
4. Confirm your choice by selecting **Cancel migration**.

We send an email to inform the user about the cancellation.

### Tab: Cancel migration for multiple users

1. In your Customer Area go to **Account** > **Users**.
2. Select **Manage user migration**.
3. In the **Pending migration** box, select **Cancel migration**.
4. Select **Cancel migration**.

You get a pop-up message that tells you if the migration was successfully canceled. If so, we recommend that you notify users that you canceled SSO migration for them.

If you have questions or feedback, get in touch with your Adyen contact.
