Setup User / Group provisioning and SSO for BitBucket Cloud Instance

Christian Humer

Hello

I want to setup security for our Bitbucket Cloud. It seams that it's not possible via Atlassian Access to setup user/group provisioning and SSO like for the other products of atassian.

Is there a dedicated plan needed to setup SSO?

Can you explain the solutions?

Christian

Theodora Boudale

Hi Christian,

While user provisioning with Atlassian Access is not possible for Bitbucket Cloud, SAML SSO is. Please see the details below:

User provisioning

This feature is on our roadmap:

https://www.atlassian.com/wac/roadmap/cloud?selectedProduct=bitbucket&search=user%20provisioning

You can add yourself as a watcher to the following feature request if you'd like to get notified via email on updates:

• https://jira.atlassian.com/browse/ACCESS-621

In the meantime, you can create user groups manually from your workspace's Settings > User groups and invite/add users to each group. Users can also be given direct access to a repository via a repo's Repository settings > User and group access > Add members.

We also have API endpoints for creating user groups:

• https://support.atlassian.com/bitbucket-cloud/docs/groups-endpoint/

Inviting a user to a user group:

• https://support.atlassian.com/bitbucket-cloud/docs/invitations-resource/

Inviting a user to a single repo:

• https://support.atlassian.com/bitbucket-cloud/docs/invitations-endpoint/

SAML SSO

SAML SSO can be configured with Atlassian Access and it will apply to Bitbucket Cloud users as well. There is an option in https://admin.atlassian.com/ (for Org Admins) called Authentication policies. You'll need to configure and save SAML and then enforce SAML single sign-on in an authentication policy. SSO will then apply to all users that are added under an SSO-enforced authentication policy; so, if your Bitbucket Cloud users are added to such a policy, they will need to use SSO to log in to Bitbucket Cloud.

If you have any questions, please feel free to let me know.

Kind regards,
Theodora