Atlassian Guard SSO for a single product under an Atlassian Org

[Daniel Smith]

Good Afternoon,

I am currently working on a client engagement whereby the client already has a cloud instance of Jira and therefore an existing Atlassian Organization. Against their existing org they have a discount (charity status), we are implementing Jira Service Management as part of a service desk solution. We have recommended they set this up as a new instance under their existing org mainly due to the discount attached to this org as well as making admin easier.

Now for the JSM solution they would like to implement SSO, is it possible to implement SSO for a single product under the org but not apply to all products  - like their existing Jira instance? 

[Matteo Vecchiato]

Hi @Daniel Smith ,

Thank you for your question.

Atlassian guard and SSO configurations and policies are at organization level and applies to all the products.

If you configure the identity provider it will be applied in all the organization and products. This kind of configurations are at "user level" and not at product level.

The only option I think you can analyse, only if the users of each product are different, it is to have two authentication policies, one with "enforce SSO" and another "without SSO". But this makes sense only if the users of each product are different and there isn't users in common

For more info about authentication policies: https://support.atlassian.com/security-and-access-policies/docs/configure-authentication-policies-for-your-organization/ 

I hope it helps 

Regards