If I make API calls out from Jira in Atlassian Government Cloud to an external app (like Okta), does that violate FedRAMP Moderate?
Jira AGC can't talk to Bitbucket DC or Confluence commercial, but it is allowed to talk to Okta as an IdP (afaik). So are non-authentication-related API calls allowed to Okta? Use case is collecting user information beyond the basics.
I know there isn't a lot of information out there about AGC, but I'm hoping that someone has implemented Jira and knows first-hand. Or someone from Atlassian, I'm not particular ;-)