To change a user's email address when SSO is enabled, the update must be made first in your Identity Provider (e.g., Okta, Azure) and then in Procurify to ensure the addresses match.
​
A Superuser can update the email within Procurify, but it is critical that this change mirrors the user's new email in the SSO system to avoid breaking their login access.

For SSO to function, the user's email address acts as the unique identifier that links their Procurify profile to their account in your company's Identity Provider (IdP). If these two email addresses do not match, the user will not be able to log in.

1. Update the IdP: An administrator must first change the user's primary email address within your organization's IdP (Okta, Azure, etc.).
2. Update Procurify: A Superuser must then navigate to Procurify's user management settings and update the user's email address to match the new one from the IdP.
• Go to Settings → Manage Users.
• Find the user and open their profile.
• Click the three-dots icon (Options) and select Edit user details.
• Change the email in the Email field to the new, matching email.
• Click Save.

• After updating both systems, ask the user to log out and log back in through their SSO dashboard to confirm access has been restored.
• If the user cannot log in after the change, double-check that the email addresses in both the IdP and Procurify are identical, with no typos or extra spaces.