Change from using Email to UPN

Question

When we setup SSO we set azure to use the users email. We have now realised that we should have used UPN. Some of our users have different domain names for their email to the UPN.

If I change SSO to use UPN what will happen to a users who has been created with an account using their email? How can I easily link these?

If I disable SSO could I then update manually the users in Directory Managed Accounts so that their email matches the UPN? I can then turn on SSO and it will all link?

Will this then update the Jira user account?

I have about 50 users who are setup "wrong".

Thanks for the help

Soumyadeep Mandal - SaM · Answer

Hi @Peter Weir ,

Please have a look at this documentation

https://docs.microsoft.com/en-us/azure/active-directory/saas-apps/atlassian-cloud-provisioning-tutorial

else you can contact Atlassian Team HERE

Regards,

Soumyadeep

Peter Weir_5iumv7 · Answer

Okay we have made the change and its gone okay. We do however have a few users that we are getting errors in the User provisioning log saying the user already exists.

However, that email is not in the list of Managed accounts. The user exists in there but with a different email. However, that is claiming it is still managed so I can not amend them.

I can see in Azure Provisioning for the user their externalId and their id but that does not seem to link to a AtlassianID

Any ideas how to get around this?

Soumyadeep Mandal - SaM · Answer

Hi @Peter Weir ,

Please have a look at this documentation

https://confluence.atlassian.com/cloud/saml-single-sign-on-943953302.html

https://community.atlassian.com/t5/Atlassian-Access-questions/Single-Sign-On-Email-Domain-Change/qaq-p/1225925

Regards,

Soumyadeep