> ## Documentation Index
> Fetch the complete documentation index at: https://backstage.spotify.com/docs/llms.txt
> Use this file to discover all available pages before exploring further.

# Remove existing authentication

> Remove an existing Okta authentication provider and its associated users and groups from the Portal catalog.

Removing existing users and groups from the catalog is easy, but make sure to follow these steps closely to prevent yourself from being locked out.

## Remove existing users and groups from the catalog

To remove existing users and groups from the catalog, follow these steps:

1. From the admin sidebar section, select Plugins -> Catalog -> View
2. Click the "modules" tab, and find the related module. A list can be found here:
   * GitHub - `@backstage/plugin-catalog-backend-module-github-org`
   * GitLab - `@backstage/plugin-catalog-backend-module-gitlab-org`
   * Entra Id - `@backstage/plugin-catalog-backend-module-msgraph`
   * Okta - `@spotify-portal/plugin-catalog-backend-module-okta`
3. Select "Manage module"
4. Select "Stop module"

## Disable existing Auth Provider

<Warning>
  Do not remove an auth provider if you have plugins that rely on it for
  authentication. For example, if you use the GitHub Actions plugin, you should
  keep the GitHub auth provider enabled even if you're switching to a different
  provider for user authentication.
</Warning>

1. From the admin sidebar section, select `App Settings` -> Auth
2. Now you can select the auth provider you want to disable and press the `Stop` button. **Important: You can't remove the last auth provider.**
