Any best practice pointers on updating user logins due to domain change?

[Andy Gladstone]

Good day fellow Confluence Cloud Admins!

My company recently underwent a rebrand and as a result our users now all have new email addresses. Since the rebrand, many users that formerly signed in to our Atlassian Cloud instance with username@olddomain.com have been trying to log in with username@newdomain.com. This has caused a lot of pain for users and admins.

Is there a best practice anyone can share around how we can update all user logins to the new username@newdomain.com email addresses? 

Caveats/Details:

1. We are on Cloud Premium.
2. After the rebrand we did install Entra to be able to manage accounts, so that is currently in play in our environment.
3. We have Guard Premium installed.

Looking forward to your guidance and assistance!

[Bhaskar]

@Andy Gladstone 

indeed changing domains is a very painful task. I am currently working on the same scenario. below is the approach which i have taken and was able to successfully complete is for one of my client as part of Cloud Migration.

Post Migration of all the Data along with Users with Old domain

1. DNS Verify both the domains (old & new) in source instance.
2. DNS verify New domain in Target System
3. In Source system used manual Claim and in Target Automatic Claim
4. Configured Entra SSO in Target instance
5. Written a python Script to change email address of all the managed accounts using User management API
6. Executed the script with Org Admin API key in Source Instance

This will change the Email address with new domain and flow into Target Instance.

Finally enabled Auto Provisioning of users in target system.

Note: this requires some downtime of the system. If users keep using old email to login to target instance post script execution then the accounts will switch back to old domain. that's why we need downtime.

Hope this helps you

[Andy Gladstone]

@Bhaskar this is a bit of overkill based on my use case, which is just getting all users in a current system to update their domains. But the principal is the same, and the suggestion of using the User Management API to run a script is a good one. 

I've accepted your answer.

Thank you!