nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

OKTA authentication policy users

Magdalena Zhisheva

Hi all,

We are about to setup multiple authentication policies and OKTA provisioning in our Jira Cloud instance.

I am quite confused with the following:

When the Okta/Atlassian site setup is ready and the users are imported in the related Okta groups will they automatically be part of the default authentication policy?

For example, if you have Confluence Okta group and authentication policy for Confluence users and User1 is in that Okta group, will he automatically became a part of the Confluence Authentication policy or shall be added manually after the initial setup of the OKTA -> Atlassian configuration?

In other words, I am trying to prepare a plan for the configuration and I am not sure if we shall manually add the users to each OKTA group & policy or only the OKTA setup is required?
Moreover, we have Trello Free users, and we won't to have a billable policy for them. Is there anyone who figure it out how to automatically add those users as non billable? (Trello and Jira users have same domain)...

Accepted answers

Brant Schroeder

@Magdalena Zhisheva If you are using Okta as your identity provider to authenticate to Atlassian products Okta will enforce the authentication policies that you specify for the app in Okta. By default it would use your default policy.

Magdalena Zhisheva

Useful details are in this topic.

All comments

Brant Schroeder

@Magdalena Zhisheva Can you accept the answer to help others?

Magdalena Zhisheva

Useful details are in this topic.

Magdalena Zhisheva

Useful note:
"Linking your domain(s) to the local directory will not affect users who are provisioned via automatic provisioning(SCIM) - users synced via SCIM provisioning will be added to the default "IdP directory"

There is a feature request related to the Automatic assignment

or Zapier can be used to achieve that as a workaround.

Magdalena Zhisheva

Thanks @Brant Schroeder ,

Thanks for trying to help on that yes, it will enforce the default policy specified for the IDP directory but the question here more about automatic authentication policy assignment and I added more details below.

Have a great day ahead!

BR, Maggie

Welcome!

It looks like you're new here. Sign in or register to get started.

Quick Links

Find more posts tagged with

cloud

jira-software

jira-software-cloud