hello Team, Is there a way i can migrate all my users to use new sso provider without them doing link account flow ? I have a microsoft ad as sso provider setuped and all my users have signed up using the same, but now we need to move all our users to use new SSO provider but it would be painful for thousands of users to go and link the accounts and then we could sunset microsoft ad login. We want this to be seamless so we can remove microsoft ad login and users can login via new sso

What is the new SSO? You can use the update admin APIs to add new credentials to users, but for OAuth2 credentials you need to know quite a few things, especially the subject. If it is the same provider just set up differently, you can check if the subject is still the same by manually doing the link process for a test user and exporting it with credentials.

New sso is our own oauth2 provider.. so subject won't be same.. also even though if i manage to get subject of users.. i'm not able to update via admin update identity api.. it just won't let me update it. It gives me 200 response but when i check it shows same old microsoft ad as oauth creds

what API call do you use?

Can you try again and send me the request id or cf-ray from the response headers, as well as the full (masked) request? I can then further debug what is happening