How do I handle a company email domain change on my SSO-enabled account?

Who can use this feature?

Available on Enterprise plan.

Accessible to Owners and Admins on Web App.

If your company changes its email domain, for example from @oldcompany.com to @newcompany.com, how you update your users depends on whether Automated User Provisioning (SCIM) is enabled on your Fax.Plus account.

  • SCIM enabled: change the email addresses in your identity provider. The existing Fax.Plus users are updated automatically and keep their fax history and fax numbers.
  • SSO without SCIM: the email addresses of existing users cannot be changed. You need to provision the new addresses as new users and give them access to the old history, as described below.

If you use Automated User Provisioning (SCIM)

  1. In your identity provider, update the email address of each affected user to the new domain.
  2. Make sure the users remain assigned to the Fax.Plus application in your identity provider, so the change is synced to Fax.Plus.
  3. Confirm that the NameID format is set to EmailAddress and that it sends the new address.
  4. Ask one of the affected users to log in with their new address and confirm they can see their faxes and fax number as before.

The users keep their existing Fax.Plus accounts, so their fax history, fax numbers and position in your account hierarchy stay the same. No further steps are needed.

If you use SSO without SCIM

If you update the usernames in your identity provider without SCIM, the affected users will no longer be able to log in to Fax.Plus. They will see the following error:

Username with SSO NameID *** was not found

Without SCIM, the email address of an existing user cannot be modified, and an existing user cannot be re-pointed to a new address. When the domain changes, your identity provider sends a NameID that does not match any user in your Fax.Plus account, and authentication fails.

The original user still exists in your account, and all the faxes that user sent and received remain attached to it.

Note: Do not delete the original users. Their fax history is attached to those user records and cannot be moved to a different email address.

Note: Keeping the original users in your account does not affect your billing. The Enterprise plan includes an unlimited number of users at no additional cost.

What to do

Provision the new email addresses as new users, then place each new user above the matching old user in your account hierarchy. The new user then has access to everything the old address sent and received.

  1. In your identity provider, confirm that the NameID format is set to EmailAddress and that it sends the new address exactly as it will be provisioned.
  2. Provision the new email addresses to your Fax.Plus account via your IdP. Each new address is created as a new user.
  3. Reassign the fax number from the old user to the new one. Go to the Numbers section, find the number, click More (⋮) followed by Manage Assignment, and assign it to the new email address. The new user receives an email confirming the assignment.
  4. Go to Users and click Edit Hierarchy in the top right corner.
  5. Drag and drop each old user so that it sits underneath the matching new user, making the new address the Manager of the old one.
  6. Click Save to confirm and apply your changes.
  7. Ask one of the affected users to log in with their new address and confirm they can see the faxes sent and received by their old address.

Note: Sent faxes are unique to each user. Owners and Admins do not have access to the sent faxes of other users, only Managers within a hierarchy do. Setting up the hierarchy is what restores access to the old sent history.

After the change

  • New faxes are sent and received under the new email address.
  • The fax number stays with the person. Once reassigned, incoming faxes arrive under the new address, and the old user keeps only its historical faxes.
  • The faxes belonging to the old address stay under the old user and are visible to the new address as its Manager.
  • The old address can no longer be used to log in once it is removed from your identity provider.

Related articles

Was this article helpful?
0 out of 0 found this helpful
More articles in this section