Migrate from OKTA to EntraID

[Colin]

Hi there,

This guide may help you:

Migrating SonarQube Users Between Identity Providers (with a focus on LDAP → SAML)

Introduction SonarQube allows delegating authentication to several Identity Providers (LDAP, SAML, GitHub, GitLab, etc.). However, after some time, a SonarQube administrator may need to change the Identity Provider that their users authenticate with. In particular, there are many organizations making the switch from LDAP Authentication to SAML Authentication for their applications. This guide aims to make it clear how to migrate those users from one Identity Provider to another, focusing on the…

Since you’re using SAML for both Okta and Entra, the transition should ideally be seamless. However, it’s possible that Okta and Entra provide different external identities, which prevents SonarQube from matching users between the two providers.

To investigate further, try comparing the API response for two users: one who has already logged into SonarQube (SQ) with Okta, and a new user who has only signed in using Entra. You can use the GET api/users/search or /api/v2/users-management/users/ endpoints for this purpose. Refer to your SQ instance’s documentation for details on these APIs.

This comparison should help identify any discrepancies in how user identities are being handled, and what changes you need to make to migrate the users from one IDP to a new one.