Move domains across directories

Move claimed domains between directories to consolidate providers, correct assignments, or restructure identity management. When moving domains to a directory with a new identity provider (Azure, Google, or another SAML provider) using SHA-2 authentication, replicate the IdP setup in both directories.

Test domain logins with the new provider:

• Microsoft Azure: Add a new Azure IdP to your directory and log into the same Azure tenant.
• Other SAML providers (including Google): Upload the same metadata file, which will point to the same SAML app on your IdP.

Users are logged out during domain transfers. Schedule migrations outside peak hours. Don’t revoke trust when moving a domain. It causes loss of accounts and access to products.

Move domains to:

• Migrate a directory to a new identity provider.
• Set up trust relationships for specific domains only.
• Group directories by teams or departments.
• Consolidate directories with shared domains.
• Fix incorrect domain assignments.
• Switch domains between Enterprise ID and Federated ID.

Before you begin

Export a full user list from the Admin Console for backup purposes.

Transfer domains to the target directory

The Domains page displays transfer status for each domain during migration. System Admins receive an email notification when the transfer completes successfully.