Provisioning users from Entra ID SSO - automatically assign license and spaces

[E_B_]

I configured Microsoft Entra ID SSO and it appears to be working well.
I can see Entra users and groups flowing to Atlassian.

The goal is to manage access from Entra so next steps would be:

1- Automatically grant users the proper licenses
2- Assign privileges on existing spaces - read only on some, update on others. 

I have a feeling #2 should be simple: grant the Entra groups the desired access to specific confluence spaces (please correct if I'm wrong).

But what about #1 licenses? Will the user be automatically assigned a license just because it was granted access to a confluence space? How does it decide what type of license to assign? Will this bypass the user invitation email step?

[Chris Rogers]

Hi @E_B_

Granting a user/group access to a space will not automatically grant them a license unless being in that group also grants a license.

How I typically see this managed is that there is a separate group for licensed users (e.g. confluence-licensed-users), and that group alone gets you a license to use Confluence.

In Confluence, there aren't many license options; you have guest users, licensed users, and administrators.

Once you're in Confluence, you can also use Entra groups for permissions at the space or page level.

[E_B_]

This is great, I will look into. Thank you.

[Chris Rogers]

Best of luck!  Feel free to ask if you have any other questions on group provisioning.

If you found my answer helpful, please consider marking this question as answered to help others find it when searching for similar solutions :)