If you experience that an AD user cannot login after changing email; the best practice is to un-sync/re-sync the user from Evo. To do this, please follow the instruction below.

1. Remove the user from Evo Sync group (the group name could be different on your AD).

2. You can wait for the LDAP agent syncs after 10 minutes or force it to sync by using one of the methods below:
     a. On new LDAP agent app, open Evo LDAP Agent Setting.

    b. If you use the old Evo LDAP agent, you can force sync by restarting "Evo LDAPS Authentication".

3. After syncing, the user should be removed from Evo portal. Now you just simply add the user back to Evo Sync group and let it syncs with Evo again.

4. Re-setup QR code for the user. Then user will be able to login again. 

Note: If you want to change a user's email address, the best practice is un-sync (delete) the user from Evo -> change the email address on AD -> re-sync (create) the user to Evo -> re-setup QR code -> user will be able to login. By using this workflow, the user will not get any problem with the login.