ADSF SSO IDP and Azure AD user provisioning

Logan Scarpace

We have an on-premise AD with an ADFS SSO IDP that we use with a number of providers.  we also sync outbound to our Azure AD.

 

Can I provision the users from Azure AD but use the ADFS IDP to provide the SAML SSO?

 

Currently, most of our users don't access Azure.  Additionally, our MFA solution is already setup via the ADFS IDP.

 

Dave Meyer

@Logan Scarpace yes, you should be able to do this. Just follow the steps for each separately

https://docs.microsoft.com/en-us/azure/active-directory/saas-apps/atlassian-cloud-provisioning-tutorial

https://support.atlassian.com/security-and-access-policies/docs/configure-saml-single-sign-on-with-ad-fs/

One thing to note: make sure that user emails are consistent between Atlassian, Azure AD, and AD FS. That way you won't run into any problems accidentally provisioning duplicate accounts.