is Guard required for Managed Users

Question

I've discovered that if our accounts are unmanaged then a user can be locked out of an account for a day if something goes wrong with their 2FA. This has happened to us today. We are now waiting on Atlassian support to get him into his account again.

I've been reading the documentation and it seems that the only way to manage a users 2FA is to verify our domain and manage the users.

Ok, fair enough.

However I'm confused. If I go down this route do I have to pay for every managed user? We've discovered that a ton of users signed for trello and what I don't want is to find our Atllassian bill will suddenly treble. 
Also does this enable Guard? I don't want to pay for that either.

We just want to manage our users passwords and reset 2FA without the pain of waiting on a support ticket being actioned.

Yours confused etc....

Marc Koppelaar · Answer

Hi Gavin,

Then you will need Guard.

Do take in mind when claiming an account, any user using Trello, or has access to another Atlassian instance, based on your domain, will become a user in guard and you will need to pay for these users.

Gavin McMenemy · Answer

I'm not that bothered by SSO at this stage. We've flown this long without it, 2fa is a must though.

I'm really curious about the billing aspects though.

Marc Koppelaar · Answer

Gavin McMenemy

No, but then you will need an app from the marketplace, that enables you to use SSO.

Otherwise Guard is your only option, if you don't want to use an app.