Manage Access to Atlassian Apps after domain claim and forced account claim

[Atlassian Admin Management]

Heyo,

yesterday we activated our Atlassian Admin Access, claimed our domain, enabled SSO and force claimed all unmanaged accounts.
Initially we deactived all accouts, to then re-activate only the needed ones via Azure account provisioning.

Now I need to manage the Access to all the other Atlassian apps which use the Atlassian login. Eg. Trello.
Trello must not be used in the company, so I need to disable access for all accounts within our claimed domain.
Also all other products / apps there might be.
How to do this, and how to see all possible apps / login provider ?

[Trudy Claspill]

Hello @Atlassian Admin Management 

To the best of my knowledge, what you ask is not currently possible.

You can control the login method they use (i.e. SSO) and their access to the app subscriptions you own.

With an Enterprise plan you can also receive notification if a claimed account is used to start a new subscription to an app within the scope of your Enterprise plan. (Refer to Shadow IT.)

Beyond that once a user has an Atlassian Cloud Account they may be invited to and accept invitations to Atlassian Cloud apps managed by other organizations. For instance, to open a support case or access documentation for a third party app you add to your own Atlassian ecosystem a user may need to access the Jira/JSM and/or Confluence Cloud apps managed by the third party app vendor.

There was a request about this which was closed in 2023, with additional information added to it about what was, at the time, future plans:

https://jira.atlassian.com/browse/AX-543

So, I think the only way you might manage that is if you require your users to use your VPN and then you set up restrictions in your network to prevent accessing websites for Atlassian apps that you don't want them to access, like trello.com or bitbucket.org, and to products that can be subscribed to that spawn a unique subdomain of atlassian.net, like Confluence and Jira. If you want to learn about all the potential products that could be accessed, you should review the products listed on the Atlassian website.

[Atlassian Admin Management]

Hm.
So I cannot restrict which apps a user can use his Atlassian Account to authenticate himself, unless I have an Enterprise Subscription ?

Thats sad. Even Microslop can do this...

[Trudy Claspill]

Even with an Enterprise subscription I don't believe you can restrict it.

The capability I mentioned is about restricting the ability of your users to set up their own subscriptions to Jira, JSM, and Confluence. That is not the same as preventing them from accessing such subscription owned by other organizations.

[Nikola Perisic]

Hello @Atlassian Admin Management 

Trello is not really part of the Atlassian apps management in your administration. This means that disabling Trello is only possible to be done if you are disabling the whole account.

[Atlassian Admin Management]

Ok. How would I administer Trello then ?
I need to deny / manage the login for everyone.

What other Apps / Services are there that could use an Atlassian Account to login ?
I need to manage / disable those as well .

[Atlassian Admin Management]

Thats sad.