Jira Cloud and OKTA Integration

Joseph Thiel

Hi,

We are planning an integration between our jira cloud systems (JSM, Confluence) and Okta.

We know how to permit access for our domain accounts and current employees for agent and customer access.

Can someone advise if we can also permit non domain accounts (3rd party vendors, customers), agent level access without forcing to authenticate through Okta? 

Can someone point me towards more info on this topic aswell please?

Thanks,

Angélica Luz

Hello @Joseph Thiel,

Thank you for reaching out to Atlassian Community!

When it comes to using SAML on an organization, users from a verified domain will have to log in using the identity provider. 

All other users that are not managed (not from a verified domain) will log in with their email and password (or using Google, Microsoft, Apple). It’s not possible to force users to log in with SSO or implement security policies if the domain is not verified. With this said, if the domain is not verified, nothing will change for users. 

Also, customers are stored locally on a site, they don’t have an Atlassian account by default, so SSO won’t be applied to them even if the domain is verified. For that, it will be necessary to manually migrate their accounts to Atlassian account (Cog icon > User management > Jira Service Management > … > Migrate to Atlassian account). Just make sure to disable the product access (User management > Product access) before migrating their account, so they won’t count towards a license.

 

For more information about SAML, please, check the documentation below:

• Configure SAML single sign-on with an identity provider

If you have any other questions regarding this matter, please let us know.

Kind regards,
Angélica