Skip to content

docs: document migrating existing accounts to SSO - #1134

Open
Anty0 wants to merge 2 commits into
mainfrom
jirikuchynka/sso-migration-docs
Open

docs: document migrating existing accounts to SSO#1134
Anty0 wants to merge 2 commits into
mainfrom
jirikuchynka/sso-migration-docs

Conversation

@Anty0

@Anty0 Anty0 commented Aug 11, 2026

Copy link
Copy Markdown
Member

Problem

Enabling SSO does not convert accounts that already exist, and the docs never said so. Neither way of moving existing users onto SSO was documented anywhere:

  • the per-user Migrate to SSO button on Account security
  • the Enforce SSO for Organization Users switch in the organization SSO settings

The only existing hint was one sentence in the self-hosted setup page about SSO sign-ups being managed by their organization.

What this adds

A new page, Migrating Existing Users to SSO, placed in the SSO section right after Getting Started, covering:

  • What changes when an account migrates. The account becomes managed by the organization, the password is deleted, two-factor authentication and its recovery codes are destroyed, email address changes and account deletion are blocked, and the user is bound to the SSO organization. Called out as irreversible, because there is no way back from a managed account.
  • The voluntary path, with the exact click path and a screenshot, plus a list of the reasons the button may not be there (already migrated, no SSO for the domain, third-party login needs a password first, SSO not enabled on the server).
  • The enforced path, with the toggle, a screenshot of it, and what enforced users actually see.
  • A warning that enforcement covers the whole API, so personal access tokens and project API keys belonging to users who have not migrated stop working, breaking CLI usage and CI pipelines.
  • Sign-ups on an SSO domain being rejected as soon as SSO is configured, independent of enforcement.

Global SSO differs (migration does not bind the account to an organization), so that is called out separately.

Other changes

  • Cross-links from sso_getting_started, sso_server_setup and password_and_2fa, including a short 2FA and SSO subsection warning that migration destroys recovery codes.
  • The getting started field table said Authorization URL / Token URL; the form labels them Authorization Endpoint / Token Endpoint.

Verification

npm run build passes, so the new sidebar entry and every internal link resolve. Screenshots were taken against a locally running instance and use placeholder values (example.com, Acme Inc.).

Setting up SSO never converted accounts that already existed, and nothing
in the docs said so. Neither the voluntary "Migrate to SSO" button nor the
"Enforce SSO for Organization Users" switch was documented anywhere.

Add a page covering both paths, what migration changes about an account
(password and 2FA are deleted, the account becomes managed by the
organization, the step cannot be undone), why the button may be missing,
and the fact that personal access tokens and project API keys stop working
for users who have not migrated once enforcement is on.

Also rename the Authorization/Token URL rows in the getting started field
table to match the labels the form actually uses.
@netlify

netlify Bot commented Aug 11, 2026

Copy link
Copy Markdown

Deploy Preview for tolgee-docs ready!

Name Link
🔨 Latest commit e62bced
🔍 Latest deploy log https://app.netlify.com/projects/tolgee-docs/deploys/6a7ae5610adf8900089dcd25
😎 Deploy Preview https://deploy-preview-1134--tolgee-docs.netlify.app
📱 Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.

To edit notification comments on pull requests, go to your Netlify project configuration.

Every other SSO page opens with the notice directly under the title.
@Anty0
Anty0 requested a review from Barush August 11, 2026 09:11
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant