Learn about the process of migrating your users to Single Sign-On (SSO).

1. Identify non-SSO users
   Review your user list to identify users who were manually created in Reltio and are currently non-SSO users.

   • From the UI, in Managing User Accounts, review all users and identify non-SSO ones by looking at the SSO column (SSO=N).
   • From the API, call Get Users to get a list of all users. Users with the attribute externalUser=false are your non-SSO users.
2. Migrate users to IdP
   Once you identify your non-SSO users you can migrate them to SSO. There are two scenarios:

   • If you manage user roles/groups in your IdP, you can simply delete the user. The next time the user logs in via IDP/SSO, it will be automatically reprovisioned into Reltio as an SSO user.

   • If you manage user roles/groups in Reltio, you must change the user status by leveraging our APIs. With Update Users, modify the users' externalUser attribute to True. This forces your users to log in via SSO. Follow these steps:

   1. Get the current user definition with View User.
   2. Change the attribute externalUser from false to true.
   3. Update the user definition with Update Users.
3. Verify user access
   Ask users to verify that they can log in using SSO and have the appropriate access to their tenants.