Migrate Splunk users from LDAP to SSO

migrate-to-sso.sh

#!/bin/bash

splunk_home=/opt/splunk/etc
my_users=$splunk_home/apps/my_domain/lookups/my_users.csv
users=$splunk_home/users
authfile=$splunk_home/new-auths.txt

# Clear the auth file
: > $authfile

csvcut -c sAMAccountName,userPrincipalName $my_users | while IFS=,  read username mail
do
	# lowercase the username
	sAMAccountName=${username,,}
	# check if user exists
	if [[ -d "$users/$sAMAccountName" && $mail != *".local" ]] ; then
		# move $sAMAccountName to $mail
		echo Moving $users/$sAMAccountName to $users/$mail
		mv $users/$sAMAccountName $users/$mail
		# Check if the user exists in any meta files
		for meta in $(grep -rl $sAMAccountName $splunk_home | egrep '\.meta$') ; do 
			echo "In $meta, changing owner from $sAMAccountName to $mail"
			sed -i "s/$sAMAccountName/$mail/g" $meta
			echo "$mail = user" >> $authfile
		done
	fi
done

cat $authfile | uniq > "uniq-$authfile"

@Hodgegoblin @sanatani806 @oxo42 is anyone of you actively checking this post

I am getting below error and not sure exactly how i can get rid of it. only thing for now i am doing is instead of doing mv and using cp to copy users directories.

INFO ConfigWatcher [83579 SplunkConfigChangeWatcherThread] - File deleted while splunkd was not running path=/opt/splunk/etc/users/[email protected]\r/corp_digital_TA_css/local/ui-prefs.conf DELETED