SSO Setup - massive update of Directory ID

Hi

Fnd User details You have in FND_USER_TAB. There is a column WEB_USER which You have to update.

That is exactely what we have done on a non production server, and it causes a lot of issues.

What kind of issues? Try to reset fnd user password even though You use AD authentication. Delete the IAM user and then try to log on.

… and most important: Install 25R1U8 framework update(not application). There is a know problem below update 8.

Could you give me some more details ? What is the problem with update below 8 ?

Standard bug.

Am I to understand that SSO is using the Primary SMTP address for login, not the UPN?

Hi ​@MCIPSTEV ,

   The recommended approach is to update the Directory ID in IFS Cloud to match the Email field for all users, since Entra ID is sending email as the identifier.

    This can be done via Data Migration or SQL update (FND_USER table). Ensure all emails are populated and unique before performing the update.

Thanks for the information, we used a more safe method using the API UserHandling

Hi,

Thanks for the update 

Good to hear that you went with a safer approach using the UserHandling API — that’s definitely a more controlled and reliable way to handle this kind of update, especially compared to direct database changes.

Using the API ensures:

• Proper validation within the application layer
• Consistency with IFS business logic
• Reduced risk of data integrity issues

Appreciate you sharing the approach — this will be helpful for others facing similar migration scenarios.

Thanks again!