Hey, We had the ability to merge users that were first created by magic link and then logged in via SSO, as well as first SSO and then magic link. If I recall, it was an issue of a feature flag. This appears to be broken now for us, is there any way to look into it?

adding @Reuven Zabirov @Doron Sharon here

Peuc12xdTvhV8KS3Fr6spmV71aLvL7GN

for IDP INITIATED right ?

For SP initiated as well

Hey, a while back we added the ability to ignore the user's tenant association, is that the case you're experiencing? that's the feature flag we enabled for you back then

No, maybe not

this is what made the tenant-less magic link users to be merged with the SSO user that has a tenant. as far as i remember. we tried re-enrolling this now, can you check if it works now? if not, let's connect and double check together, might be related to something else.

I'll try it out

generally speaking, do you see the NameID of the user from the SAML response? it has to be the set as the email so we can merge with the magic link user entity

Now it works, so I guess the re-enrollment solved the issue