How do we setup Entra Id (Azure) SSO to our Jira environment using SAML.

Question

I am looking to find details on how we can setup Entra Id (Azure) SSO to our Jira environment using SAML. Can someone please point me at any how do guides or details so we can use our AD accounts and passwords to authenticate.

Samet Yildiz · Accepted Answer

Hello Adrian,

you need the product “Atlassian Guard”, formerly “Atlassian Access”, to be able to integrate Entra ID at all, if you don't already know that. Here is the official documentation from Microsoft and a guide in the community. Would you also like to set up users? Then pay attention to the two options. I would recommend that you analyze the documentation.

Regards

Sam

Ed Letifov _TechTime - New Zealand_ · Accepted Answer

Hello, @Adrian Knight

You may want to check some answers I've provided earlier on how to configure SSO and User Provisioning correctly:

* https://community.atlassian.com/t5/Atlassian-Access-questions/Integrate-Azure-AD-with-Atlassian-Cloud/qaq-p/1852575#M3417
* https://community.atlassian.com/t5/Atlassian-Account-questions/SAML-SSO-with-Azure-AD-does-not-work-when-using-quot-Continue/qaq-p/2085502
* https://community.atlassian.com/t5/Jira-Service-Management/Azure-AD-login-and-incoming-email-not-matching-up/qaq-p/1821809#M88619

In the case of Azure AD/Entra ID, the documentation published (by Atlassian?) to the Microsoft documentation site completely omits a very important detail about setting "Matching Precedence" correctly and could, and indeed has been, misunderstood by the admins. And to complicate this, the default value of that being set to the "User Principal Name" is wrong too in a general enterprise use case, since UPNs can change – it should instead be the Object ID.