I’m working on a project where we need to migrate users from one tenant to another. The tenants are part of the Auth0 solution. We want to retain user credentials, especially passwords, during this migration.
Requirements:
- Migrate users from Tenant A to Tenant B
- Preserve login credentials (username/email + password)
- Retain user metadata such as display name, roles, or custom claims
- Support a large number of users (bulk migration)
- Minimize user impact or need for password reset
Questions:
- Is it possible to migrate users between tenants while preserving passwords?
- If not, what are secure alternatives or workarounds (e.g., temporary login, password reset flows)?
- What are the best practices or recommended tools for such migration?
- Any official scripts or APIs?
- Are there any compliance or security concerns I should be aware of?
- Especially when transferring sensitive data like passwords or tokens.
Environment Details (optional but helpful):
- Identity Provider: Auth0
- Number of users: e.g., 10,000+
- Preferred method: API-based / Scripted
- Migration time window: e.g., maintenance window available
Hi @vijaypratapsingh
Welcome to the Auth0 Community!
For the issue that you are having, I would recommend either one of these 3 approaches:
-
Use the initial tenant as an IdP then by using a form, you ask them to re-enter their login information. Using the information in the form, you will use the Management API to create a new user inside the new tenant with the same information. However, this might not be suitable since the other information stored ( as you have mentioned) will not be available.
-
Create a user export job on the main tenant in order to export the users and then create a user import job on the tenant you want to migrate the users to. I would recommend this approach since it will save all user attributes associated with it instead of just migrating their login credentials to the other tenant. However, if you wish for your users to retain their passwords, password hashes are not available via any of Auth0’s APIs for security reasons. A tenant administrator would need to raise a support ticket requesting this: User passwords. Otherwise, your users would need to reset their passwords. Please keep in mind that creating a support ticket would require you to be under a paid plan.
*Use the previous Auth0 Tenant as n IdP in order to have access to your user information without having to migrate them.
Unfortunately, there is no other traditional or out-of-box solution regarding migrating users from one tenant to another.
If you have any other questions on the matter, let me know!
Kind Regards,
Nik