nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

Atlassian Access - Sync from AD specific group AND auto disable

Martynas Ramanauskas

Good day,

We are using Atlassian cloud.

We are using Atlassian Access. We want to sync users from AAD (Azure AD) but only which belongs to specif group. But we also want that if user is disabled in AAD - it would also be disabled in Atlassian.

We have successfully configured sync from specific AAD group. but how to make automatic disable?

Accepted answers

Jimmy Seddon

Hi @Martynas Ramanauskas,

We are also using Atlassian Access with Azure AD. I'm pretty sure this is 100% handled on the AD side of things and it just works when user provisioning has been setup correctly. Our IT team manages our Azure Active directory and they set it up with a specific set of groups to share with Atlassian Access. We recently had a user leave the company and there was nothing I was required to do as their account was disabled as soon as our IT team disabled the account in AD.

If this isn't happening for you, what you may want to try doing is disabling the sync on the Azure AD side of things and restarting it again, per the troubleshooting steps outlined here:

https://confluence.atlassian.com/cloud/user-provisioning-959305316.html

I hope that helps!

-Jimmy

All comments

Jimmy Seddon

Hi @Martynas Ramanauskas,

If this isn't happening for you, what you may want to try doing is disabling the sync on the Azure AD side of things and restarting it again, per the troubleshooting steps outlined here:

https://confluence.atlassian.com/cloud/user-provisioning-959305316.html

I hope that helps!

-Jimmy

Jeroen De Cock_wmwbl4

Hello @Jimmy Seddon, for us it also works automatically like this.

Now, we want another way of working...

Is there also a possibility to make that a user stays active but not synced/linked with Atlassian Access but stays active as an unlinked/unsynced user? (just removed from the group)

This way we will make it possible that users can stay using Bitbucket or Trello for free but loose access to JIRA-license/access.

Jimmy Seddon

You got it @Jeroen De Cock! Simply making sure they aren't a part of the group being sync'd to Atlassian Access should accomplish what you are looking for.

Jeroen De Cock_wmwbl4

@Jimmy Seddon , strange thing is that when I remove a user from the AD-group the user is disabled in Atlassian Cloud and link with Azure cloud is kept. I would expect that the user stays enabled in Atlassian Cloud but looses link with the AD-group and Azure cloud and Atlassian Access instead.

Welcome!

It looks like you're new here. Sign in or register to get started.

Quick Links

Find more posts tagged with

access

identity-manager