Can SAML be enabled for just one of many customers?

George Sopko

Basically, we have just one customer that wants SAML enabled for the portal they use in submitting support tickets to us. 

Nikola Perisic

Hi @George Sopko 

In Jira Cloud, you can use authentication policies to enforce specific security requirements for different sets of users. This is the recommended method by Atlassian for a phased rollout or for specific user groups. 

1. Configure SAML SSO: First, you need to set up the general SAML configuration for your organization in the Atlassian Administration panel without immediately enforcing it for all users.
2. Create a New Authentication Policy: Create a new policy that is separate from the default one.
3. Assign the User: Add the specific user (or a group containing only that user) to this new policy. Ensure this user's email domain is a verified domain in your Atlassian organization.
4. Enforce SAML: Within the new authentication policy's settings, enable the option to Enforce single sign-on.
5. Test: The specified user will now be required to log in via your Identity Provider (IdP), while other users in the default policy will continue to use their standard login methods