nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

Is it possible for Jira Software to have SSO with Okta for both verified and unverified domain users

Robert Johnson_7gqfsr

we configured SSO via okta for our jira cloud instance and have a verified domain for our employees. However, our Okta instance has contractors who use a few different domains. The contractors do sync to Jira with the various domains but are not showing up in managed accounts and therefore we cannot figure out a way to require them to use our SSO (Okta). Is that a limitation or are we missing a setting somewhere.

We need to require all our Jira users to us SSO regardless of verified domain or not. As long as they are sync via our Okta, they should be required to use SSO.

For now we disabled SSO until we figure this out.

Accepted answers

Walter Buggenhout

Hi @Robert Johnson and welcome to the Community!

Currently this is not possible (yet) as setting up SSO (via Atlassian Access) requires you to claim the domain first, which is - obviously - something you cannot do for domains your organisation does not own.

However, this is an area Atlassian is working to improve. An initiative to enforce security policies for users from unverified domains is currently part of an ongoing EAP (see feature request ACCESS-102), which should later on provide the necessary prerequisites to also work on SSO for those same, external users (you can track that feature request here: ACCESS-1362)