How to delete local users and switch to SSO in Observe

General / Other
, ,
1

You can delete local users in Observe and have them re-authenticate using SSO. This is a supported workflow when integrating with an Identity Provider (IdP) like Microsoft Entra ID, Okta, or another SAML/OAuth-based system.

Key Considerations Before Proceeding

Deleting local users comes with trade-offs: users will lose ownership of worksheets, dashboards, and datasets, as well as their favorites and UI settings. Additionally, local group memberships will be removed, so these must be mirrored in the Identity Provider (IdP) to maintain access and permissions after the switch to SSO.

The steps to accomplish this:

1. Delete Local Users:

  • As an Observe administrator, navigate to the Workspace Settings on the lower left corner of your Observe UI.

image
image464×358 17.8 KB

You can then manage the users from the left hand of the panel, by selecting Users:

image
image237×266 8.18 KB

  • Identify and disable local user accounts that will transition to SSO. On the right of the user you will see a pencil to edit the user, or you can also use the trash can to disable the user.

Edit and disable icons:

image

Disable user from Edit user screen:

image
image516×532 21.1 KB

  • Once disabled, you can delete the user by clicking the trash can icon that appears when hovering over their name.

2. Re-Login with SSO:

  • After deletion, users log in via the SSO portal redirects to your IdP.

  • The IdP authenticates them and passes their identity to Observe, creating a new SSO-based user profile linked to the same email if properly configured.