Provisioning users from Entra ID SSO - automatically assign license and spaces

E_B_

I configured Microsoft Entra ID SSO and it appears to be working well.
I can see Entra users and groups flowing to Atlassian.

The goal is to manage access from Entra so next steps would be:

1- Automatically grant users the proper licenses
2- Assign privileges on existing spaces - read only on some, update on others. 

I have a feeling #2 should be simple: grant the Entra groups the desired access to specific confluence spaces (please correct if I'm wrong).

But what about #1 licenses? Will the user be automatically assigned a license just because it was granted access to a confluence space? How does it decide what type of license to assign? Will this bypass the user invitation email step?

Chris Rogers

Hi @E_B_

Granting a user/group access to a space will not automatically grant them a license unless being in that group also grants a license.

How I typically see this managed is that there is a separate group for licensed users (e.g. confluence-licensed-users), and that group alone gets you a license to use Confluence.

In Confluence, there aren't many license options; you have guest users, licensed users, and administrators.

Once you're in Confluence, you can also use Entra groups for permissions at the space or page level.