Can I have local users in JIRA cloud even though I have SAML enabled on my company.com domain?

Tony Montoya

I bought Atlassian Access and I plan to integrate it into our IDP on our company.com domain.  I have a number of 3rd party vendors however, that will need to access my site that will never have a company.com email address.

 

Is it possible to have both Access.Domain.SAML users and local (non-domain) users at the same time?

Petter Gonçalves

Hello Tony,

Thank you for reaching out.

The quick answer to your question is: Yes, you can have both your internal team logged with SAML and the third-party users logged with their respective Atlassian Accounts, you just need to have properly invited them to your site or configured your instance in a way they can self sign-up.

As mentioned in this thread, here's the authentication flow when you mixed those two authentication options:

1. When you are trying to login to Atlassian Cloud, the login form asks you to enter your email address first
2. The login form behaves based on your email address:
   • If the entered email address's domain is verified and its organization enables SAML integration, you will be redirected to the SAML IdP's form
   • If not, you will be asked to enter your Atlassian Cloud's password

Of course, you will not be able to configure any two-step verification methods for those third-party vendors as you will do for your domain verified accounts. 

Let me know if you have any questions about the information provided.