How Domain Name Changes Affect SSO Login with Entra ID
Some companies change their domain name without changing their underlying Microsoft tenant. This affects how the domain is verified, but does not affect how users log in to Newforma Konekt through SSO.
How Newforma Konekt Identifies You
When you log in with SSO, Newforma Konekt uses two pieces of information to identify your account: your email address, and a unique identifier assigned by Microsoft called an Object ID. The Object ID is specific to the Microsoft tenant your company uses, not to the domain name. Because a domain rebrand does not change your tenant, your Object ID does not change either.
The Domain Verification Window
The new domain name must be added to the Microsoft tenant and verified by your organization’s IT administrator before it can be used for authentication. Meanwhile, when the old domain is removed from the tenant, Microsoft immediately invalidates it as an authentication domain and updates all associated user accounts to a temporary @onmicrosoft.com address.
During the period between the old domain’s removal and the new domain’s verification, neither domain is usable for authentication, and SSO login attempts to Newforma Konekt will fail. This is expected and temporary. Wait until your IT administrator has completed verification of the new domain before attempting to log in.
What To Do
- During domain verification: Wait until the new domain is fully verified in Entra ID before attempting to log in.
- Logging in: Once the new domain is verified, log in as normal. Your Object ID doesn’t change, so no re-linking prompt appears and no further action is required.
- Updating your email address: After the new domain is verified, the Hub Owner should contact Newforma Support to update user email addresses in Konekt. This doesn’t affect your ability to log in, but ensures notifications go to the correct address.
FAQ
- Q: Do I need to do anything to keep logging in after my company’s domain changes?
- A: No. As long as your company stays on the same Microsoft tenant, no action is required to log in once the new domain is verified. Contact Newforma Support separately to update your email address in Konekt.