Skip to main content

Moving data from one tenant to another

  • Oct 29, 2026 12:29 PM UTC
  • 1 reply
  • 10 views

Hi,

we're moving to a new Microsoft Entra ID (Azure AD) tenant. Since we sign in to Docebo through SSO, there are a few things on your side we'll need your help with. We can't change these from our end.
The main reason for this is that we’ve been acquired and we are in the process of consolidating everything.

We're planning to switch over around the end of January.

Here's what's changing for us:
- Our tenant ID is going from [Our current ID] to [New Tenant ID]
- We'll have new SSO details: Entity ID/Issuer, login and logout URLs, and signing certificate (new metadata attached, or available at [New Metadata URL])
- User emails/UPNs are staying the same, but the underlying Microsoft object IDs will likely change. If you match users on object ID, please let us know.

Could you let us know about the following?

  1. SSO setup: What's the process for updating our SSO connection with the new details? Can we set up the new one alongside the old one ahead of time, or does it have to be swapped on the day?

  2. Matching users: How do you link people to their existing accounts (email, UPN, NameID, object ID)? We want to make sure nobody ends up with a duplicate account or loses their data or permissions.

  3. Provisioning (SCIM): If we use automatic provisioning with you, we'll need a new SCIM endpoint/token. Will re-syncing link up with existing accounts instead of creating new ones?

  4. Integrations: If anything uses an app registration, client ID, or admin consent in our tenant, what needs to be redone in the new one?

  5. Tenant/domain restrictions: If access is locked to our tenant ID or domain, can you add the new tenant ID?

  6. Anything else tied to our current tenant that we might not know about.

It'd also help to have a contact we can reach on switchover day, a way to test before we go live if you have one, and a quick note on how we'd roll back if something goes sideways.

Happy to answer any questions, feel free to reach out to me.
Kind Regards

    1 reply

    Docebian

    Hi, Ciaran here with Docebo Support!

     

    Since this involves your SSO configuration, user matching, provisioning, and potentially connected integrations, I recommend opening a Support ticket soon so the team can review your specific setup and provide guidance ahead of your switchover date.

    In general, an identity-provider tenant change may require updates to SSO details such as the issuer/entity ID, login/logout URLs, and signing certificate. Whether a new configuration can be tested alongside the existing one depends on your setup. User matching and SCIM re-sync behavior also depend on the identifiers and provisioning rules configured for your environment, so it’s best to confirm those before making changes. Any integrations or access restrictions tied to the current Entra tenant may need their own review as well.

    To open a ticket, a Superadmin can click the profile icon in the platform, select Help Center, then Help desk ticket. In the form, select Single Sign-On and describe the related SCIM or integration changes, your target date, and the guidance you need. Please share metadata, tenant identifiers, and other configuration details through the ticket rather than posting them publicly here. See Using the platform's Help center for details.

    Terms & ConditionsAccessibility statement