Do i need atlassian guard if i want my users to log into cloud jira through my company ADFS?

Question

Right now we are thinking about Jira cloud and i am a little confused about whole LDAP sync and login.

If i have only a jira cloud am i am able only to sync users from my Active directory?
If i want a SSO i need to purchase Atlassian guard? Is this correct?

Chitra Nagdeo · Answer

I certainly understand, you may discuss with Atlassian Guard team to help you further if any workaround was feasible. Navigate to support portal and select Atlassian Guard.

Břínek Adam · Answer

Thanks for the simple answer.

But to be honest if even the user sync is impossible without paying for Atlassian Guard it feels like milking companies for more money.

Chitra Nagdeo · Answer

Hi @Břínek Adam ,

Welcome to Atlassian Community Forum!

Yes, Atlassian Guard is required for SSO in Jira Cloud.

* SSO (including SAML SSO) for Jira Cloud is only available if you purchase an Atlassian Guard subscription (or have a Cloud Enterprise plan, which includes Guard Standard).

* Atlassian Guard lets you connect your identity provider (like Azure AD, Okta, etc.) for SSO and user provisioning.

* Without Atlassian Guard, users log in with Atlassian accounts and cannot use enterprise SSO

Direct LDAP/AD sync is not natively supported in Jira Cloud alone.

* Jira Cloud does not support direct LDAP or Active Directory sync like Jira Server/Data Center.

* To sync users from your on-premises Active Directory (or other IdPs), you need to use Atlassian Guard (formerly Atlassian Access) and configure user provisioning (SCIM) via your IdP (such as Azure AD, Okta, etc.)

I hope this helps answer your query, have a good day!

Regards

Chitra Nagdeo