UniFi Identity Enterprise - Downgrade UniFi Identity Enterprise to UniFi Identity

Downgrading UniFi Identity Enterprise requires you to remove UniFi Console from your UniFi Identity Enterprise workspace. Follow the requirements carefully before downgrading to ensure your users, services, and permissions can be retained locally. 

Requirements

• UniFi Identity requires UniFi OS 3.2.5 or later.

Migrate Door Access Devices

Ensure your Identity Enterprise Agent is up to date and you have migrated your door access devices to the UniFi Access application:

1. Go to the new user interface of your Identity Enterprise Manager > Settings > UniFi Consoles > Consoles.
2. Select the UniFi Console you want to downgrade to UniFi Identity.
3. If an Update Identity Enterprise Agent link is present, click it for optimal experience.
4. If a Migrate Door Access Devices link is present, click it to migrate your door access devices to the Access application. Skip this step if the link is not displayed.

5. After migration, click View In Site Manager and go to the Access application > Devices to verify that all devices are migrated and online.

   • If they are, proceed with the following steps to downgrade UniFi Identity Enterprise to UniFi Identity.

   • If you encounter any issues, In case any issues arise, please contact uid.support@ui.com.

Effects on Configuration and Credentials Following Downgrade

• After removing a console from UniFi Identity Enterprise, users will no longer be able to access the console's One-Click WiFi, One-Click VPN, doors, Talk softphones, and EV Stations through the Identity Enterprise desktop and mobile apps. However, they can still use their PINs and NFC cards to unlock assigned doors.
• Users must install the UniFi Identity Endpoints and load the required credentials to continue accessing One-Click WiFi, One-Click VPN, doors, Talk softphones, and EV Stations.

Downgrade from UniFi Identity Enterprise to UniFi Identity

• Removing the console from UniFi Identity Enterprise automatically downgrades to UniFi Identity.
• Downgrading from UniFi Identity Enterprise to UniFi Identity will remove your UniFi Console from the Identity Enterprise workspace, but it will not deactivate your UniFi Identity Enterprise workspace.
• See the UniFi Identity help articles to learn more.

Method 1

When the console is removed from Identity Enterprise, the console's user data, One-Click WiFi, One-Click VPN, Door Access, Talk softphones, and EV Stations services will be retained locally.

1. Go to the new user interface of your Identity Enterprise Manager > Settings > UniFi Consoles > Consoles, and select the console you want to downgrade to UniFi Identity.
2. Scroll down to Manage > Remove Console and click Remove. 
3. Confirm to delete the console and click Delete.
4. Once removed, go to your UniFi OS > select the console removed from Identity Enterprise > select an application > Settings > Admin & Users > Identity Endpoint and manage more Identity settings:
   • Site Logo
   • Services: Enable One-Click WiFi, One-Click VPN, Door Access, and other services.
   • Identity Credentials
     • Auto-Send Invitations When a User Has an Email: Automatically send an Identity invitation email to existing users after resources are assigned. 
     • Require a Verification Code When Loading a Credential 
   • Directory Integration
   • Manage
     • Add to an Existing Workspace
     • Deactivate UniFi Identity 

Method 2

• Only the UniFi Console Owner can deactivate Identity Enterprise.
• To retain your users, services, and permissions locally, you must tick the Retain Users and Migrate Services to UniFi Identity checkbox. If you choose not to retain them, you need to enable services, add users, and assign permissions again. 

1. Go to your Site Manager and select the console you want to downgrade to UniFi Identity.
2. Select an application, go to Settings > Admin & Users > Identity Enterprise > Manage, and click Remove Console from Identity Enterprise.
3. Confirm you want to remove the console and tick the following checkboxes as needed.
   • Retain Users and Migrate Services to UniFi Identity 
   • Send UniFi Identity Invitations to Users Automatically: The UniFi Console Owner and other existing users will receive an email invitation to activate the Identity Endpoint for easy access to powerful resources. 
4. Click Proceed.
5. Once removed, you'll be directed to the Identity Endpoint page, where you can manage more Identity settings:
   • Site Logo
   • Services: Enable One-Click WiFi, One-Click VPN, Door Access, and other services.
   • Identity Credentials
     • Auto-Send Invitations When a User Has an Email: Automatically send an Identity invitation email to existing users after resources are assigned.  
     • Require a Verification Code When Loading a Credential 
   • Directory Integration
   • Manage
     • Add to an Existing Workspace
     • Deactivate UniFi Identity 

FAQ

I have deactivated UniFi Identity Enterprise on a UniFi Console. Can I reactivate it on the console?

Yes. You can reactivate UniFi Identity Enterprise on the UniFi Console in two ways: by creating a new Identity Enterprise workspace on the console or by adding the console to an existing workspace.

• Activate a new workspace on the UniFi Console: One email address can only activate one workspace. This method is applicable only when less than 3 workspaces have been activated on the same console. Do either of the following: 
  • Transfer your UniFi OS ownership to a user whose email address has never been used for workspace application and activation. 
  • Deactivate your current workspace and then apply for a new workspace. 
• Add the UniFi Console to an existing workspace: Do either of the following:
  • If you don't want to keep your current Identity Enterprise workspace, deactivate it and then apply for a new workspace. Then add the console to the workspace.
  • If you want to keep your current Identity Enterprise workspace, apply for a new workspace using a different email address, and then transfer the workspace ownership to your email address after the workspace is activated. Then add the console to the workspace.
  • If your Identity Enterprise workspace has been deactivated and you want to reactivate it, please contact uid.support@ui.com. Once reactivated, you can add your console to your workspace.

Can I use the same email address to create more than one UniFi Identity Enterprise workspace?

No. An email address can be used to activate only one UniFi Identity Enterprise workspace. Here are alternative approaches if you want to use the same email address for the workspace owner across different workspaces.

• Deactivate your current workspace and then apply for a new workspace.
  • To reactivate a workspace that has been deactivated, please contact uid.support@ui.com.
• Apply for a new workspace using a different email address, and then transfer the workspace ownership to your email address after the workspace is activated.