Single Sign On for External User

Question

Confluence cloud now uses Azure for account access. We have azure accounts that are converted to external users. Example, I have a user account in Azure with Datacom(another company) email address and linked to their Azure for authentication.

Access is granted to that user, but when he tries to login with the link we sent, it tries to authenticate the user to their Confluence subscription and fails as the user don't have access to their company's confluence page.

Atlassian login page keeps authenticating the user to their own Company's Confluence subscription and not to the subscription that we have.

Any advice ?

Humashankar VJ · Answer

Hi @ABC.Ram.Ponnuram

I see what you mean about guest accounts being a pain to manage.

Regards

ABC.Ram.Ponnuram · Answer

Got more info from the external users, once they got their license setup for their own confluence subscription, they are able to access our subscription without any issue.

Sounds like an external user also needs a license from their side.

Getting my colleague to test access for external users who don't have any confluence subscriptions (like personal accounts gmail... etc)

Looks like the external user account need 2 licenses, 1 granted by us and the other on their own subscription (if they have one). As per your previous suggestion to have 2 separate accounts (1 internal with our license and 1 guest account) for the external users, but managing the guest account as before is an overhead for management of accounts.

Needing 2 licenses is not a happy ending answer :p

Humashankar VJ · Answer

Hi @ABC.Ram.Ponnuram

Thanks for adding more context.

I could sense the challenges while managing multiple accounts for external users in Azure

Why don't you try other possibilities like - Separate Internal and Guest Accounts / Convert Internal Accounts to Guest with MFA.

Regards