Move your users. Keep them yours.

AuthBeam moves users between Auth0, Okta and Microsoft Entra ID. It tells you what happens to every password before you commit, and it never keeps a copy.

Start a migrationSee how it works

From an export to people signing in

AuthBeam walks you through each step and explains the choice in front of you. Where a vendor needs an app or a permission, it shows you how to set it up.

  1. In your browser

    Read

    Connect the source, or drop in an export. AuthBeam shows what the file holds and which password hashes it found.

  2. Before anything moves

    Decide

    Pick a destination and see what happens to each password, with the alternatives when the answer is no.

  3. In your browser

    Check

    Map the fields, then review every person AuthBeam would skip and why.

  4. You run it

    Move

    Run a pilot of five, confirm a real person can sign in, then import everyone. Or download a pack and run it yourself.

Can your users keep their passwords?

It depends on where they're going. Pick a destination to see the answer, and what to do when it's no.

Hashes: yes

Auth0 can import most password hashes

Import hashes
bcrypt, Argon2, PBKDF2, scrypt, SHA, MD5, HMAC, LDAP
Keep it at first sign-in
Your Login script checks the old system

People keep their password when you have the hashes. Auth0 and Okta hand them out only on request to their support teams.

Otherwise: No hashes? Move people at their first sign-in, on a Professional or Enterprise plan, or send a password reset.

Hashes: yes

Okta imports some hashes, not all

Import hashes
bcrypt, SHA, MD5 and PBKDF2. Not Argon2 or scrypt
Keep it at first sign-in
A password import hook you run

AuthBeam names the format it found and asks you to confirm it. A wrong hash imports cleanly and locks the person out.

Otherwise: No hashes? Use a password import hook, or activate people with an email and let them choose a new password.

Hashes: no

Entra ID can't import password hashes

Import hashes
No. Microsoft has no hash import
Keep it at first sign-in
Not available for workforce tenants

Everyone gets a new password. AuthBeam says so before anything is written.

Otherwise: Issue an initial password that must be changed, or a Temporary Access Pass.

Hashes: no

External ID can't import them either, but can move people at sign-in

Import hashes
No. Microsoft has no hash import
Keep it at first sign-in
A custom extension and a service you run

Without that service, each person sets a new password.

Otherwise: Use self-service password reset, or run the extension if keeping passwords matters more than the extra work.

Where your users go, and where they don't

Your users are read and converted in your browser, and held in memory only. Read how your data moves.

  • Files on your deviceRead by your browser. They aren't uploaded.
  • Your cloud storageYour browser fetches and writes files with time-limited links you create.
  • Microsoft GraphYour browser calls Microsoft directly.
  • Auth0 and OktaAn optional pass-through forwards each call and forgets it, because these APIs don't take browser calls. Prefer not to? Use the pack.
What AuthBeam doesn't have
  • Database of your users
  • File storage
  • Analytics
  • Third-party scripts
Your own account is different: we keep your name, email and company so you can sign in. See the privacy notice.

Between the platforms you already run

Any of these can be the source or the destination. Coming from your own database? Bring a CSV or JSON export.

Auth0Bulk import jobs
OktaAPI or CSV import
Microsoft Entra IDWorkforce and External ID

  • No copy, by design

    AuthBeam has no database for your users. They're held in your browser tab and gone when you close it.

  • A guess is never imported

    If a hash format can't be proven from the data, you confirm it first.

  • You can run it yourself

    Every import comes as a downloadable pack, so nothing has to pass through us.

  • Built by people who migrate

    AuthBeam comes from Veridyne's identity consulting work on Auth0, Okta and Entra ID.

Free for Veridyne customers

Sign in and start with a pilot of five. If you would rather have someone next to you for a difficult migration, Veridyne's identity consultants do this every day.

solutions@veridyne.eu

Ready when you are

You need an export of your users, or access to the source tenant. AuthBeam guides you through the rest.

Start a migrationTalk to Veridyne