With Okta SSO configured for managed domain accounts, will non-domain users need Okta access?

[Joe Doherty]

We are considering implementing Atlassian Access for our organization and would like the following configuration:

1. Domain users need to authenticate through Okta SSO. 
2. Non-domain users do not need to authenticate through Okta SSO, but must use 2FA authentication.

Are we able to achieve these results? Or would all users require Okta SSO to access Atlassian cloud products, whether they are domain users or not?

[Dave Meyer · Accepted solution]

Hi @Joe Doherty ,

Yes, you can achieve this. In fact, it's the standard behavior. If you verify a domain and configure SSO with Okta, it will apply to all users with accounts on your verified domains. Non-domain users that have access to your cloud products will not be affected in any way – they will still have access but will log in with their email address and password.