Skip to main content

Bulk Update Login Method to Single Sign-On (SSO)

This guide explains how to bulk update staff accounts from Orah login to Single Sign-On (SSO) using Reset Credentials. Resetting credentials moves Active users back to Imported so their login method can be reconfigured for SSO access.

What this article covers: the bulk migration of existing staff accounts to Single Sign-On. If you are troubleshooting one user who cannot log in, do not reset credentials for everyone — check that single account's authentication profile and email address first, or contact Orah support.

🧩 Overview

Staff accounts in Orah move through the following account states:

Imported → Configured → Invited (password login only) → Active → Suspended

When users are already Active, their login method cannot be changed directly. Resetting credentials moves the accounts back to Imported, allowing them to be configured again with a new login method such as SSO.

Resetting credentials:

  • Removes existing login credentials

  • Changes account status back to Imported

  • Allows accounts to be reconfigured with SSO

  • Does not delete user accounts or data

Applies to:

✅ Orah Admins

✅ IT Administrators

🧭 Step-by-Step Instructions

Step 1 — Open the Staff List

  1. Log in to Orah as an administrator

  2. Go to Admin Console → Staff

  3. Click Filter on the right side

  4. Under Account Status, select: Active

The list will now show all active staff accounts.
​

Step 2 — Reset Credentials in Bulk

  1. Select the checkbox at the top of the list to select all users

  2. Click More Actions

  3. Select Reset Credentials

This will:

  • Remove user login credentials

  • Change account status to Imported

  • Allow accounts to be reconfigured with SSO
    ​

Step 4 — Configure Accounts for SSO

  1. Select the users again

  2. Click More Actions

  3. Click Configure account

  4. Configure authentication using your SSO login method
    ​

Depending on your school’s authentication setup:

  • If password login is enabled, you may need to send invitation emails so users can set passwords.

  • If SSO is enforced, users can usually log in through the Identity Provider once configured and may not need an invitation email.
    ​

Suspended accounts

An account in the Suspended state cannot be restored to Active from the interface. There is no "reactivate" action.

To give that person access again:

  1. Delete the suspended account.

  2. Send them a fresh invitation.

If you are not sure whether an account should be deleted, contact Orah support before you remove it.

💡 Important Notes

  • Users must exist in your Identity Provider (Google, Microsoft, etc.).

  • User email addresses must match the Identity Provider.

  • Resetting credentials does not delete user accounts or data.

❓ FAQs

Q: Will users lose their data if credentials are reset?

No. Resetting credentials only changes login access. User data remains unchanged.

Q: Do users need a new invitation email?

It depends on your authentication setup:

  • Password login: Users need an invitation email to set a password.

  • SSO login: Users can usually log in through the Identity Provider once configured and may not need an invitation email.

Q: Can I switch only some users to SSO?

Yes. Instead of selecting all users, select only the users you want to update.

🔧 Troubleshooting

Users cannot log in after SSO setup

Check that:

  • The user exists in your Identity Provider

  • The user’s email matches Orah

  • The user is configured with the correct SSO profile

  • Identity Provider identifier mapping is correct

Users still see password login errors

This may happen if:

  • The account is still configured for Orah login

  • The SSO profile was not applied correctly

  • Identity Provider details do not match the Orah account

Try resetting credentials and configuring SSO again.

If you need additional support, please contact Orah Support.

Related Articles
Did this answer your question?