scim provisioning

[Aggeliki K]

Can I do SCIM provisioning from 2 different azure AD tenants to the same atlassian organization? 

[Ed Letifov _TechTime - New Zealand_]

Hello, @Aggeliki K 

not according to this: https://support.atlassian.com/provisioning-users/docs/add-identity-providers-to-connect-users/

[Marc -Devoteam-]

Hi @Aggeliki K 

If they are different IDP's then this should is possible.

understand-user-provisioning 

[Aggeliki K]

hello @Marc -Devoteam- 

They are both microsoft azure with different entra id.

[Marc -Devoteam-]

Hi @Aggeliki K 

Yes, then you can, but only one can be used for SSO with Atlassian Guard.

If this is your requirement, then you would need to look at 3rd party SSO solutions.

[Ed Letifov _TechTime - New Zealand_]

@Marc -Devoteam- 

Can you point to documentation that describes how to connect two different IdPs to Guard Standard?

This is what I am getting when one IdP is already present – what am I missing here?

[Marc -Devoteam-]

Hiv @Ed Letifov _TechTime - New Zealand_ 

As I mentioned, you can connect multiple Azure (Entra ID ) directories, but you can only use one as IDP.

If you want to use both as IDP, then you need to revert to 3rd party marketplace apps.

[Ed Letifov _TechTime - New Zealand_]

Yes @Marc -Devoteam- and I keep asking "how?" Can you explain?

In Cloud a user directory is connected via SCIM under (inside) the IdP connection. There is only an ability to connect one that I see there. Sharing access tokens between Azure tenants is out of the question – this will screw up sync.

So how exactly do you connect multiple Azure directories to the same Atlassian Cloud org?

[Marc -Devoteam-]

Hi @Ed Letifov _TechTime - New Zealand_ 

I forgot to mention, this is currently only an option on an Enterprise subscription

If you want this on a non-enterprise, you eed to use a 3rd party SSO app to achieve this.