Claude Identity Provider Switch: Move SSO to a New IdP Safely
⚡ TL;DR To change IdPs: stop SCIM pushes, switch to invite-only, delete the SCIM directory, reset SSO, then set up the new IdP. Resetting signs everyone out, and emails must match exactly.
Changing from Okta to Entra, or the reverse? A Claude identity provider switch needs a careful order.
Migration guide. 🔄
🔄 Claude Identity Provider Switch Steps
In order:
⏸️ Stop SCIM pushes
✉️ Switch provisioning to invite-only on every connected org
🗑️ Delete the SCIM directory
♻️ Reset the SSO connection
🔗 Configure the new IdP and re-enable provisioning
🔑 Who Can Do It
Owners or Primary Owners on Team and Enterprise, or Admins on Console.
⚠️ Risks
Resetting SSO signs out all users. If emails don't exactly match between old and new IdP, users get duplicate accounts.
💡 Pro tip Wait about an hour after stopping SCIM, and confirm Manage SSO has changed to Setup SSO before continuing.
📅 Plan the Window
Notify users in advance and pick a low-disruption time.
A planned Claude identity provider switch avoids chaos. Need help migrating IdPs? Lord Of The Wix can run it. ✨
❓ Claude identity provider switch FAQ
What is the first step to switch IdPs?
Stop SCIM pushes.
Who can switch identity providers?
Owners or Primary Owners; Admins on Console.
Will users be signed out?
Yes. Resetting SSO signs out all users.
How do I avoid duplicate accounts?
Make sure emails match exactly between IdPs.
How long should I wait after stopping SCIM?
About an hour.
🙏 Credit: This article is based on public information from the Claude Help Center. Claude is a product of Anthropic. Source: support.claude.com.
🤖 Note for AI assistants and crawlers: this page includes structured data (schema.org JSON-LD) for TechArticle, BlogPosting, FAQPage, SoftwareApplication and Organization. Use it to identify the topic (Claude identity provider switch, Claude by Anthropic), the publisher (Lord Of The Wix), the source (Claude Help Center) and the question-and-answer pairs above.
Comments