When you need to migrate LDAP to SAML, you may need to disable LDAP and enable SAML in Artifactory.
Normally, after LDAP is disabled and SAML is enabled in Artifactory, a user will need to login in to the Artifactory UI so that the user will continue to use the existing API Key
It is because the realm column will be updated with 'saml' during the login process.
Otherwise, a user should get the following error when they use the API key until they login into Artifactory.
{
"errors" : [ {
"status" : 401,
"message" : "Can't reauthenticate LDAP for user: 'xxxxx@xxxx.com': user is locked, disabled or does not exist in LDAP"
} ]
] It is generally not possible to have all the account owners login to the UI to resume using their API keys.