Configuring SSO using Microsoft Entra ID

unknown

I have a question regarding configuring SSO using Microsoft Entra ID. 

Thanks to the Atlassian comprehensive document, I can do it without a problem. However, we want to confirm a few things before implementing it. 

We have been using Atlassian for years and want to use SSO using Azure AD. We want to minimise the disruption as much as possible. 

The questions are: 

1. Will it affect the existing users? How can we map users after provisioning it in Entra ID?
2. Can we do it in stages? i.e. Test it on a group of users before deploying it to everyone in the organisation. 

 

Any advice is much appreciated. 

Alexis Robert

Hi @[deleted], 

 

happy to answer your questions here. 

1. The mapping between existing users and users coming from Azure AD is done automatically by Atlassian Access, using the email address as a unique key. So, if your users have the same email in Azure AD and their Atlassian account (that should be the case) then it's completely transparent to them
2. Yes you can. You should be able to assign only a few users to the Atlassian Cloud app in Azure AD if you want to do some testing first. This is explained in the Microsoft documentation, in section "Assign the Microsoft Entra test user".

 

Let me know if this helps, 

 

--Alexis