I've recently gotten Atlassian Access configured with Okta SSO and SCIM provisioning.
However, I think there needs to be more account details that's allowed to be pushed into the user's details via A.A. (Currently, organization, Job Title and Department is pretty much the only items that gets associated with the user right now.)
https://support.atlassian.com/provisioning-users/docs/understand-user-provisioning/
I would really like to have all attributes that Okta (and others IDP's) provides to be available in the users details. (i.e; .Division, Office Location, Manager) We use these pretty heavily in our Okta rules.
Some of this may be a bit broader in scope, but this is where I'm going. Automation based on these missing account details. Examples:
- Limit a Confluence space to mangers only
- Automatically include the manager in specific tickets submitted by a user
- Only the engineering division should have access to specific Jira projects
For now, I'll have to create rules-based Okta groups and push them into Atlassian Access via SCIM. But perhaps Atlassian can add these accounts details can be added and provide a way to be able to access them.
