> This page is for Portal.

> For clean Markdown of any page, append .md to the page URL.
> For a complete documentation index, see https://docs.emnify.com/llms.txt.
> For AI client integration (Claude Code, Cursor, etc.), connect to the MCP server at https://docs.emnify.com/_mcp/server.

# Switch single sign-on (SSO) providers in the emnify Portal

> Learn how to replace an existing SSO provider in the emnify Portal and safely switch your organization to a new identity provider.

The emnify Portal supports federated login through a single configured single sign-on (SSO) provider.
If you need to migrate from one identity provider to another (for example, from Microsoft Entra ID to Google Cloud Platform), you must remove the existing provider before activating a new one.

> **Note**
>
> The emnify Portal doesn't support running two SSO providers in parallel.
> Switching providers requires a short transition period where users may need to log in with a password.

## Prerequisites

Before you begin, make sure you have an administrator account with access to **Workspace settings**.

> **Warning**
>
> Deleting the current SSO provider logs out the user performing the deletion immediately.
> Ensure you can sign in again using a password before continuing.
>
> If you no longer have a password or never set one, request a reset using the Portal login screen.

## Step 1: Remove the existing SSO provider

[Log in to the emnify Portal](https://portal.emnify.com/sign/).

Go to **Workspace settings** (building icon) in the top-level navigation and click [**Single Sign-On**](https://portal.emnify.com/organisation-settings/federation).

Locate the currently active **Provider**.

Click the trash can icon to delete the provider.

> **Info**
>
> When you delete the provider, you're logged out immediately.

## Step 2: Log back in with a password

After deletion:

Return to the Portal login page.

Sign in using your email address and Portal password.

> **Tip**
>
> If you don't have a password, select **Forgot password** and complete the reset flow.

## Step 3: Configure the new SSO provider

Once logged in:

Go back to **Workspace settings** > **Single Sign-On**.

Click **Add** under the new provider you want to configure.

Enter the required provider details.
For step-by-step instructions per provider, see [SSO how-to guides](/portal/how-tos#single-sign-on).

Click **Create and Activate**.

> **Warning**
>
> You must verify the new provider to activate SSO.

## Step 4: Verify the new provider

To enable login through the new provider:

Back on **Single Sign-On**, confirm that the new provider appears as a listed **Provider**.

Click **Verify Integration**.

Complete a successful login through the new identity provider.

After verification, the provider becomes active and users can sign in using SSO.

## What users experience during the switch

While the switch is in progress:

* Users who are already signed in remain logged in until their session token expires.
* Other users are prompted to sign in with a Portal password.
* SSO login is unavailable until the new provider is fully configured and verified.

> **Tip**
>
> Plan provider switches during a maintenance window or low-usage period to minimize disruption.

## Next steps

After switching providers:

* Confirm that at least one **Administrator** can log in using SSO.
* Notify users of the change if login behavior or prompts will differ.
* See the [SSO troubleshooting guide](/portal/sso/troubleshooting) for common issues.