Atlassian Access SSO + Guests

jorge.carvalho

Hi,

We're in the process of migrating from on-prem to Atlassian Cloud.

We setup SSO with AAD and that's all working fine for our verified domain.

From the documentation we could find so far, it looks like there is no way we can leverage AAD B2B guests, so we're left with the challenge of configuring password complexity, MFA and access reviews for the partners we work with.

Is there any way of achieving this using only Atlassian Access and without having to create a full account for these external partners in our verified domain?

Any documentation you can please direct us to?

Thanks!

Ed Letifov _TechTime - New Zealand_

Hello, @jorge.carvalho 

Atlassian Access can only enforce security controls onto the accounts from the domains that you've claimed/verified i.e. "yours".

As such there is nothing you can do with external partners, unless you give them accounts in one of your verified domains.

A good practice is to make their domain distinct from your main one, but keep in mind the resulting email must be usable i.e. reachable – since Cloud will attempt to verify the account by emailing with a link.