Migrate existing user accounts from individual tenants to OneID
Zuora OneID commonly uses local user accounts that are limited to a specific tenant. In comparison, OneID global user accounts provide access to multiple tenants. The transition to global accounts simplifies access management, allowing you to navigate multiple tenants with just one OneID global account.
Benefits of transitioning local user accounts to OneID
Transitioning authentication to a global scale can be done smoothly by migrating local user accounts to OneID, ensuring the preservation of roles and permissions. This process ensures you can retain access permissions in your respective tenants as users. Once the migration is done, users can log in to OneID and keep their original permissions, which are editable on the platform.
Local tenants may have duplicate user entries when assigning access through OneID if accounts aren't migrated. It is strongly recommended to migrate during onboarding to prevent duplication.
User account migration
User provisioning
New user provisioning involves either assigning users to groups or granting them direct access to tenants, allowing them to enter the corresponding tenant environment.
Migration process
Follow these steps to convert local user accounts to global status in OneID.
- Access the Admin console in OneID.
- Navigate to the Users module.
- Click on the Import Local User button.
- Select the tenant from the provided dropdown menu.
- Choose the local user accounts to migrate from the available user list.
Post-migration process
Once migration is complete, activate the OneID accounts of users. Users can easily see their current tenant access on the MyApps page without needing extra group assignments or tenant access grants from OneID.
FAQs on self-service migration of local user accounts to OneID
This article answers frequently asked questions about migrating local user accounts to Zuora OneID. If you have a question not covered here, don't hesitate to ask in the Community Group or contact Zuora Global Support.
Q: Can I migrate local user accounts independently as an Organization Administrator?
A: Absolutely. You can now migrate local user accounts to OneID independently without requiring Zuora support.
Q: Do I need to create global user accounts before migrating local user accounts?
A: No, user accounts should be created within OneID before migration. The migration process will automatically generate global user accounts within OneID.
Q: Does user migration apply to both Zuora Billing and Zuora Revenue?
A: Presently, self-service user migration is exclusive to Zuora Billing. For migrating user accounts from Zuora Revenue to OneID, please get in touch with Zuora support.
Q: Can I selectively migrate users to OneID from a Zuora tenant?
A: Certainly, you can migrate specific users to OneID for initial setup and testing purposes.
Q: Should API user accounts be migrated to OneID?
A: No, API user accounts utilizing basic authentication should remain at the local tenant level and not be migrated to OneID.
Q: What about migrating Zuora support accounts to OneID?
A: Zuora support accounts should be disregarded for migration to OneID.
Q: What will be the login name for migrated users, and can it be altered?
A: The login name for migrated users will be their normalized work email, which cannot be changed during migration. However, you can create a user with a desired username in OneID and then migrate the user's local account.
Q: After migrating local user accounts to OneID, should I deactivate the local user account in the tenant?
A: No, local user accounts will synchronize with the corresponding OneID user account following migration. Access permissions for these accounts must be managed via the OneID user account.