nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

Is it possible to use a mix of Atlassian and SAML accounts?

Chris Imeson

I am considering setting up SAML authentication on our subscription but we currently have a mix of Internal users and External users using the application. I'd like Internal users to authenticate using SAML but would still like the possibility of providing contractors access using the Atlassian account. Is this possible?

Accepted answers

K. Yamamoto

Hi Chris

It is possible. Here's the authentication flow when you mixed those two authentication options:

When you are trying to login to Atlassian Cloud, the login form asks you to enter your email address first
The login form behaves based on your email address:
- If the entered email address's domain is verified and its organization enables SAML integration, you will be redirected to the SAML IdP's form
- If not, you will be asked to enter your Atlassian Cloud's password

Screenshot 2018-06-22 10.33.59.png

Hope this helps.

All comments

K. Yamamoto

Hi Chris

It is possible. Here's the authentication flow when you mixed those two authentication options:

When you are trying to login to Atlassian Cloud, the login form asks you to enter your email address first
The login form behaves based on your email address:
- If the entered email address's domain is verified and its organization enables SAML integration, you will be redirected to the SAML IdP's form
- If not, you will be asked to enter your Atlassian Cloud's password

Screenshot 2018-06-22 10.33.59.png

Hope this helps.

Wilfried Jonker

Thank you for the clear and concise response. I was also wondering if this would be possible.

K. Yamamoto

Glad to hear my response was helpful for you, Wilfried. And thanks for voting up the answer. Please feel free to ask in the community if you have other questions.

Damian Egli

but then we can't use User and Group provisioning from Azure to Atlassian Cloud Products as we can't assign external users to our provided groups. Is that correct?

So am I right then, that only SAML work and provisioning of our "internal" ( aka verified domain) users?

thanks and regards, Damian

Welcome!

It looks like you're new here. Sign in or register to get started.

Quick Links

Find more posts tagged with

cloud

sso

atlassian-guard

user-management

saml