Internal Atlassian subscription tied into Azure AD - How to handle external invitations

[jthompson]

Our company has an Atlassian subscription tied into Azure AD. We are receiving Jira Confluence invites from an outside vendor and receiving the error message "X user is not assigned to a role for the application" for our users not in our AD group. What is the best way to handle this?

[Dave LIAO]

@jthompson - to start, does your company only want users who are part of a specific AD group to access your Atlassian Cloud instance, OR do they want users to be able to sign up themselves? Or is either path okay?

[jthompson]

We only want internal users who we have been assigned a Jira license in our AD group which is linked to SSO, but if users receive an invitation from a 3rd party, we want them to be able to join the 3rd party's instance. Right now our SSO kicks in and prevents them from either.