Changing email id - User is both managed and unmanaged

[Phalgun Maddali]

Hi

I am trying to updated a users' email id from username@approveddomain1.com to username@approveddomain2.com. Both the old and new domains are 'approved domains' in the Org Setup (not verified domains).

I visit the user's profile page to edit their email id, and I cannot see the edit email id option even though I am Global Admin. 

I ask the user to do it themselves at https://id.atlassian.com/manage-profile/email but they see an error - Your Account is managed, contact admin to change your email address. 

So I visit admin -> organization -> managed accounts section and I see "you have no managed users". 

How do I change this person's email id? 

[Dave Meyer]

@Joy Knox if you've configured SSO, it should be strictly enforced on all your organization's managed accounts (users with email addresses on a domain you've claimed).

If you're seeing behavior where this is not the case, I would recommend contacting Atlassian support, as this is a security risk and not intended behavior.

[Joy Knox]

We had users configured before SSO, it seems like the users created before SSO aren't working and only new users provisioned thru SSO are connecting via SSO. But what's frustrating is that both User/pass and SSO are working and not requiring SSO for all access.

I'll create a support request.