🧩 Overview
Staff accounts in Orah move through the following account states:
Imported → Configured → Invited (password login only) → Active → Suspended
When users are already Active, their login method cannot be changed directly. Resetting credentials moves the accounts back to Imported, allowing them to be configured again with a new login method such as SSO.
Resetting credentials:
Removes existing login credentials
Changes account status back to Imported
Allows accounts to be reconfigured with SSO
Does not delete user accounts or data
Applies to:
✅ Orah Admins
✅ IT Administrators
🧭 Step-by-Step Instructions
Step 1 — Open the Staff List
Log in to Orah as an administrator
Go to Admin Console → Staff
Click Filter on the right side
Under Account Status, select: Active
The list will now show all active staff accounts.
Step 2 — Reset Credentials in Bulk
Select the checkbox at the top of the list to select all users
Click More Actions
Select Reset Credentials
This will:
Remove user login credentials
Change account status to Imported
Allow accounts to be reconfigured with SSO
Step 4 — Configure Accounts for SSO
Select the users again
Click More Actions
Click Configure account
Configure authentication using your SSO login method
Depending on your school’s authentication setup:
If password login is enabled, you may need to send invitation emails so users can set passwords.
If SSO is enforced, users can usually log in through the Identity Provider once configured and may not need an invitation email.
💡 Important Notes
Users must exist in your Identity Provider (Google, Microsoft, etc.).
User email addresses must match the Identity Provider.
Resetting credentials does not delete user accounts or data.
❓ FAQs
Q: Will users lose their data if credentials are reset?
No. Resetting credentials only changes login access. User data remains unchanged.
Q: Do users need a new invitation email?
It depends on your authentication setup:
Password login: Users need an invitation email to set a password.
SSO login: Users can usually log in through the Identity Provider once configured and may not need an invitation email.
Q: Can I switch only some users to SSO?
Yes. Instead of selecting all users, select only the users you want to update.
🔧 Troubleshooting
Users cannot log in after SSO setup
Check that:
The user exists in your Identity Provider
The user’s email matches Orah
The user is configured with the correct SSO profile
Identity Provider identifier mapping is correct
Users still see password login errors
This may happen if:
The account is still configured for Orah login
The SSO profile was not applied correctly
Identity Provider details do not match the Orah account
Try resetting credentials and configuring SSO again.
If you need additional support, please contact Orah Support.