Single-sign on

Switch single sign-on (SSO) providers in the emnify Portal

The emnify Portal supports federated login through a single configured single sign-on (SSO) provider. If you need to migrate from one identity provider to another (for example, from Microsoft Active Directory to Google Cloud Platform), you must remove the existing provider before activating a new one.

The emnify Portal doesn’t support running two SSO providers in parallel. Switching providers requires a short transition period where users may need to log in with a password.

Prerequisites

Before you begin, make sure you have an administrator account with access to Workspace settings.

Deleting the current SSO provider logs out the user performing the deletion immediately. Ensure you can sign in again using a password before continuing.

If you no longer have a password or never set one, request a reset using the Portal login screen.

Step 1: Remove the existing SSO provider

2

Go to Workspace settings (building icon) in the top-level navigation and click Single Sign-On.

3

Locate the currently active Provider.

4

Click the trash can icon to delete the provider.

When you delete the provider, you’re logged out immediately.

Step 2: Log back in with a password

After deletion:

1

Return to the Portal login page.

2

Sign in using your email address and Portal password.

If you don’t have a password, select Forgot password and complete the reset flow.

Step 3: Configure the new SSO provider

Once logged in:

1

Go back to Workspace settings > Single Sign-On.

2

Click Add under the new provider you want to configure.

3

Enter the required provider details. For step-by-step instructions per provider, see SSO how-to guides.

4

Click Create and Activate.

You must verify the new provider to activate SSO.

Step 4: Verify the new provider

To enable login through the new provider:

1

Back on Single Sign-On, confirm that the new provider appears as a listed Provider.

2

Click Verify Integration.

3

Complete a successful login through the new identity provider.

After verification, the provider becomes active and users can sign in using SSO.

What users experience during the switch

While the switch is in progress:

  • Users who are already signed in remain logged in until their session token expires.
  • Other users are prompted to sign in with a Portal password.
  • SSO login is unavailable until the new provider is fully configured and verified.

Plan provider switches during a maintenance window or low-usage period to minimize disruption.

Next steps

After switching providers:

  • Confirm that at least one Administrator can log in using SSO.
  • Notify users of the change if login behavior or prompts will differ.
  • See the SSO troubleshooting guide for common issues.