Email Address Changes
Best practices for handling end-user email changes in bulk
Last updated
Was this helpful?
Best practices for handling end-user email changes in bulk
Last updated
Was this helpful?
Organizations may need to migrate users to a new email domain, such as during a merger or acquisition. For users authenticating via Single Sign-On (SSO), their email address serves as the primary identifier in both the Identity Provider (IdP) and Keeper. If the email addresses do not match, authentication will fail. To prevent disruptions, email changes must be properly coordinated between both systems.
To ensure a seamless transition when updating user email addresses in bulk, Keeper recommends using Keeper Commander (CLI Tool) before making changes in the IdP. This approach maintains authentication continuity and minimizes user impact.
Reserve the New Email Domain Ensure the new domain is for your enterprise. If not, contact Keeper Support to enable it before proceeding.
Download Keeper Commander Get the latest release:
Update User Emails Run the following command to change an email address:
This command updates the primary email while retaining the old email as an alias.
Reference:
Batch Processing for Multiple Users
Create a batch file with multiple commands for bulk updates.
Test with one user before applying changes to all.
Guide:
Sync Keeper SSO Connect (If Applicable) If using Keeper SSO Connect On-Prem, sync the SSO Connect server to apply the updates.
Update Emails in the IdP Once emails are updated in Keeper, proceed with updating them in the IdP.
Users can manually update their Keeper email, but this must be coordinated to avoid authentication issues. Before proceeding, ensure that role-based enforcement does not prevent email changes.
Steps for Users to Update Their Email
Log in to Keeper using the current email address.
Administrator updates the email in the IdP.
User updates email in Keeper:
Navigate to Settings > General > Email Address - Reset Now.
A confirmation email will be sent to the new email address.
Click the link in the email to confirm the update.
Sync Keeper SSO Connect (If Applicable)
If multiple users require email updates, please contact Keeper Support for assistance in coordinating these updates efficiently.