Multiple orgs can verify, and claim users from, the same domain

[#1]

Update (24th May 2024): this change has now been released to all customers. 

Hi everyone,

We’re excited to share that soon admins like yourself will be able to verify the same domain across multiple Atlassian organizations. If you come from a company with a decentralized structure – e.g. separate business units or subsidiaries – you can have the same domain verified in separate Atlassian organizations. This gives you the autonomy and flexibility to manage your organization and accounts without affecting another organization.

When you verify a domain, you can claim specific accounts from that domain in your organization. When you claim these accounts, you gain:

• More control over Atlassian accounts – you can edit, delete, or deactivate their accounts.

• The ability to customize and enforce security policies on your subset of accounts if you have Atlassian Guard (previously Atlassian Access) – you can enforce 2FA (two-factor authentication) or set up SSO (single sign-on) so that your identity provider’s policies apply to your managed accounts.

You can only manage an Atlassian account in one organization. If someone else manages an account in another organization, you’re unable to claim the account.

For example: Employees of Acme US and Acme UK both share the acme.com domain. There are a total of 1,000 Atlassian accounts belonging to the acme.com domain. After verifying the domain, Acme US can claim 400 of the accounts, and Acme UK can claim the remaining 600 accounts. Because alana@acme.com is already managed by the Acme US org, her account cannot be claimed by Acme UK.

This update does not change how people collaborate so you can still invite users to collaborate with your team, even if you do not manage their account.

We anticipate to start rolling this change out later this month. 

If you have any feedback or questions about these changes, leave a comment and I’ll be in touch!

Cheers,

Aneita Yang
Atlassian Access Product Manager

[Sam Nadarajan]

Oh wonderful this will help some of the organizations I have worked with that need a more flexible structure! Thank you very much!

[Alex Koxaras _Relational_]

This is a nice addition! Would love to know more about how this will work.

[原口 徹]

Since we have two instances of JSM, one for production and another for a sandbox, this feature is mandatory to make the IAM related settings identical between them.

Please let us know how SOON the feature become available.

[Karl Mentzer]

Hi Atlassian Team,

This community post says "Coming Soon" but it shows as "Rollout Complete" in the Release Track.
Can you please confirm?

[Miguel GONZALEZ ROMERO]

Hi Atlassian

as previous colleague Karl asked, please confirm whether this is rolled out already or not yet.

If not yet, when this will be made available?

thanks

[Ste Wright]

Hi @Karl Mentzer @Miguel GONZALEZ ROMERO 

The post was edited above, it's now available for all customers :)

Ste

[Sivaji Kotta]

Hi @Alex Koxaras _Relational_ ,

Please share any reference documentation for configuring this feature.

cc: @Sam Nadarajan, @Ste Wright 

[Mathieu Truchot]

Hello,

Great feature thanks a lot !

How will be managed new users in the domain ?

ACME US / UK will have to manually claim their new users ? or a "default" organization will be assigned ?

Thanks for clarification,

[Miguel GONZALEZ ROMERO]

Hi Atlassian

To be able to user this feature, do I need to mandatorily have Atlassian Guard? (currently we do not have it)

thanks

[Juan Pablo Gorgati]

Hi @Aneita if two subsidiaries with the same domain want to use Guard and manage their own set of users, can both of them have their own Guard instance? Can they have different bills for each instance? Or both should share a unique Guard instance / bill?

Thanks!

[Kishan Sharma]

Much needed feature for organizations operating within a decentralized structure.

[Sagar Khadka]

Hi Team, is there any documentation that I can follow for this?
If  yes, can you please provide me a link to the documentation?
Thanks.

[John Smith]

Where is the documentation on how this works?