Updating a community member's email

[Toby]

Good day everyone,

I have a community member who has changed companies and I need to update his email. Our community is private so there is validation via SSO.
What is the best way to change his email so he can still have all credentials earned?

Community Admin > Mod Tools > Edit Users?
What about the SSO ID? Does that say the same?
Thank you,

Toby

[StanGromer]

Hey Toby - What is the SSO platform you use?  My guess is you would need to change it in there, and it will automatically change downstream in Khoros the next time he logs in.  This is how a lot of integrations work I think, but each is kind of unique so depends on how your systems/integration flow is setup.

[Toby]

Thanks @StanGromer - isn't that what updating the SSO ID in Mod Tools does?

Cheers

[StanGromer]

I'll use our own SSO integration as an example:

We utilize OKTA as our IDP, so OKTA is master, community is slave.  Any changes in OKTA are passed downstream into Khoros, while no changes from Khoros are passed into OKTA.  It's a one-way street.

So if we want to change a users email, we change the email address in OKTA, but their SSO ID (1234) doesn't change which is what is linked to Khoros (1234), thus that common connection between OKTA->Khoros still exists.  As soon as the user logs in via SSO, during that connection, OKTA is pushing into Khoros any updates that have since been made.  If you only change the email in Khoros, as soon as the user logs in next time, OKTA is going to overwrite that change.

Using mod tools would generally be when not changing email address but switching to an entirely alternative account - So if in your IDP you had stan1@anaplan.com (sso id 1234) which would still exist, but now you want me to use stan2@anaplan.com (sso id 5555) - You could change my Khoros account to be 5555, so if stan2@anaplan.com logs in, they'll now have access to khoros account 5555, not 1234 anymore.

I melted my own brain typing this out, and doubt it makes any sense, but I tried, lol.  SSO is one of those things I think I understand pretty well at this point, yet I also question if anyone truly understands any of it.

[Toby]

"yet I also question if anyone truly understands any of it."
I understand it is virtual lock and key 🙂
This was easier to do in Jive 😞
Thanks for the help @StanGromer 

[Toby · Accepted solution]

Hi everyone,
Closing the door on this. Here is what I did:

1. Have the user complete that new registration process when triggered to do so
2. In Mod Tools, view the new account and capture what their new Unique SSO ID is on that new account
3. At the end of that new SSO ID type ‘archive’ so that you can use the ID on the historic account
1. Example: ad6e97cd-29d9-91e6-4935-4e15a0230f97archive
4. Take that SSO ID (less ‘archive’) from the new account and apply it to the account you would like to preserve
1. Example: : ad6e97cd-29d9-91e6-4935-4e15a0230f97

The user is all set because the unique SSO ID associated with the new email has been applied to the historic account.

Cheers,

Toby

[Toby]

Hi @StanGromer -

A follow-up question for this:
Once I have successfully merged the accounts, they both have the same email address so the community is getting alerts for the main username and the temporary one set up for the merge. 
To stop alerts on the unused profile, may I got to Community Admin > Users > Edit Users > then close the profile? Or changes the email on the account?
What is the best way to stop alerts for the unwanted profile?
Best,
Toby

[StanGromer]

@Toby We usually add something like ".old" to the end of all old usernames/email addresses, helps us easily identify previously changed accounts, and it 'breaks' them in a sense so they won't get notifications like above!

[Toby]

Thank you @StanGromer - so changing the email address on the old account will not impact the new one? The username does not really matter; it's the email address that is important?
Toby

[lindahav]

--- posted brand plea for help ---

[carclar]

Hi @Toby - 

Can you help me understand this process?

We have a user with e-mail "EmailA@gmail.com" already a member in our community with many approved posts. They need to change the e-mail they use in our community because they have been hired to our team. We are trying to have an account with "EmailB@gmail.com" exist while ALSO holding the previous posts created under the EmailA account. 

Is this possible with the steps you provided? I followed what I believed where your steps in our development site and now have two accounts attached to EmailA, while we want them instead to both (or at least the first one with posts) to have  EmailB.

Thank you!