I want my customers (internal colleagues) to be able to log in with SSO. On the website: https://support.atlassian.com/security-and-access-policies/docs/configure-saml-single-sign-on-for-portal-only-customers/ it says that it only works for portal-only customers, but aren't my customers portal only customers?
Hey @Antonia ,
Could you confirm if your internal colleagues have other Atlassian licenses (Jira, Confluence, etc), or are they only being granted the Customer permission for Jira Service Management?
The "Portal Only Customers" SSO configuration only works for users that don't also have other licenses. For internal users, you must use the SSO configuration provided through Atlassian Guard.
Hope that helps,
Robert
Hey @Robert DaSilva, thank you for your answer. I would do this with the portal-only-customer settings, but I have not set portal-only accounts in the Customer Access settings. Is that a bad thing? Does it still work? My customers have no licenses.
@Antonia I'm not sure I understand your concerns with your last comment.
I would encourage you to review the following documentation related to Portal Only customers in JSM: https://support.atlassian.com/security-and-access-policies/docs/configure-saml-single-sign-on-for-portal-only-customers/
This feature is intended for individuals that will only ever access your Customer Portal to raise requests in your JSM Project.
To configure the feature, you will need to navigate to the Admin Hub (admin.atlassian.net), then to Products (or Apps, if it's been renamed in your instance already), then to the instance you want to configure.
Once here, find the Jira Service Management section, and then click the "Portal Only Customers" option. This is where you will be given the option to configure SSO for these users.
Hope that helps!
I would just want to know beforehand whether it works at all with the settings if “portal only customer” is not even selected. Please take a look at my settings, I haven't selected “portal-only account” for External, so I'm asking whether it works at all with the settings I have there.
@Antonia To be clear, you're referring to the "Allow portal-only accounts to be created for new customers accessing the help center" option, under "External", yes?
This setting is specifically for external users, allowing them to create Atlassian Accounts that are automatically granted the "Customer" permission in your instance, if they don't already have an account with that access.
This setting should not impact the ability to enable SSO for your internal users.
I'll reiterate, if you are aiming to enable single sign-on for accounts that are considered part of your company or organization, the proper way to accomplish this is to utilize Atlassian Guard and enable SSO for your entire site.
Here is the guide for how to enable SSO via Atlassian Guard: https://support.atlassian.com/security-and-access-policies/docs/configure-saml-single-sign-on-with-an-identity-provider/
The "Portal Only SSO" option is designed for customers that are not part of your organization.
It looks like you're new here. Sign in or register to get started.
