[Feature]: Support renaming users and organizations on NuGet.org
Related Problem
We've received several support requests on NuGet.org over the years to change a user account or organization username. This is not currently supported with either a tool available to users or to site admins.
The workaround is:
- Create a new account with the desired username.
- Add the new account as an owner on packages the old account owns.
- Accept ownership in the new account and remove the old account from ownership.
- Optionally, delete the old account.
This is workable in most cases but has some problems:
- It's very painful if the number of accounts is high.
- Other entities like ID prefix reservations or organization memberships are not transferred
- API keys are reset
- You need a second MSA or AAD account for the transition process
The Elevator Pitch
We should provide a tool that allows either users or site admins to perform this operation easily.
There are issues to consider with this feature:
- Username changes break client trust policies that use username (https://docs.microsoft.com/en-us/nuget/consume-packages/installing-signed-packages#trust-package-owners)
- The old username should be blocked from usage to prevent impersonation attacks
- Could this be used by spammers or other malicious actors to avoid detection?
- Should we allow as many renames as you want? Or should there be some throttling? If we block old usernames this tool could be used to easily eat up a lot of usernames.
Additional Context and Details
There is another related request of changing username casing: https://github.com/NuGet/NuGetGallery/issues/5013. This could perhaps be solved at the same time.
Past requests for a username change on our issue tracker are here:
- https://github.com/NuGet/NuGetGallery/issues/4673
- https://github.com/NuGet/NuGetGallery/issues/1838
- https://github.com/NuGet/NuGetGallery/issues/319
Hi Team, any update for this ?
Hello @chuongmep, we've recently updated the policy around this. We're still working on updating our documentation to reflect this (cc @ryuyu). Could you email [email protected] about your username change?
Was this closed on purpose? @mariaghiondea
Hi @sliekens , after send email for team, my problem resolved.
Sure, but I don't see a self-service page on the gallery so I'm curious if this issue for that was closed by accident.
so, it is still not possible to change the owner name
@sliekens - correct, there is no self service form today.
@Marusyk - it is possible via support request. Please see https://learn.microsoft.com/en-us/nuget/nuget-org/nuget-org-faq#how-do-i-change-my-nuget-org-account-username.