Disable Atlassian account creation for own domain

Pascal Grunau

Hi all,

we have the current setup:

• Atlassian Access in place
• sync users and groups from Microsoft AzureAD
• Obviously verify our domain and hove all user managed

All employees are told to use Microsoft as Authenticator and not creating plan Atlassian accounts with their mail. Unfortunately they often try to login through the normal Atlassian login instead of using Microsoft SSO.

Can we somehow disable the possibility of create Atlassian accounts with our domain to prevent them to login with plain Atlassian account and then always requesting for access?

 

Also we introduces Jira Service Management. If I now want to allow all internal users as customers I need to add our domain to the list of approved domain. But that I can not do because then they will keep creating plain Atlassian accounts and then also would be able to access the applications with wrong account.

 

We also have external users we invite to our applications (all kind of Identity Provider possible depending on the external IT (Google, MS, Atlassian)) and we use our Atlassian accounts on some external Atlassian products. Both needs to be still possible.

 

Any ideas on that?

 

Thanks

Petter Gonçalves

Hello @Pascal Grunau

Thank you for reaching out.

Unfortunately, it is not possible to prevent the creation of Atlassian Accounts for a specific claimed domain. We have a feature request created to consider this possibility in the future:

Ability to restrict Atlassian account creation for claimed domain

Please, feel free to vote and watch the suggestion to increase its priority and receive updates.

Regarding the statement below:

Also we introduces Jira Service Management. If I now want to allow all internal users as customers I need to add our domain to the list of approved domain. But that I can not do because then they will keep creating plain Atlassian accounts and then also would be able to access the applications with wrong account.

Although you should add the approved domain, you can remove the application access to any new accounts that sign-up with that domain. This will prevent new Atlassian accounts from accessing Jira internally (They will be limited to the customer portal) and will not be counted as paid licenses in your billing.

You can follow the steps below to properly prevent your users with the approved domain from automatically sign-up for new products on your site:

1. Navigate to your approved domain page (admin.atlassian.com > Products > User access settings)
2. Click to edit the approved domain
3. Set the Product role of the products to "None"

Let us know if you have any questions.