Can't Login. Had to create a new account to create this message

[Phillip Roberts]

I can't login, its my own fault, I screwed up SAML. 

There doesn't seem to be a way to recover the account, and because I can't log in I can't file any support tickets. Kind of ridiculous honestly. 

How do I proceed? 

Thanks! 

[Craig Castle-Mead]

Hi @of7085 

Based on your description, I assume you have the below in Access:

• A local authentication policy that contains all of the users who you claimed/added before you setup your AzureAD connection in Access
• An SSO authentication policy that contains all of the users you’ve provisioned in AzureAD since the connection was established

If that’s the case, and all users in the local policy have the same usernames as would come from AzureAD, I’d expect the below to work (validate with a small sample of low impact users first):

• Ensure users in the local policy are added to AzureAD in the way you’d add them if they were net new users
• In Access, move the users from the local authentication policy to the AzureAD auth policy. This should then create a SCIM connection between the user and AzureAD object.

CCM