You're on your way to the next level! Join the Kudos program to earn points and save your progress.
Level 1: Seed
25 / 150 points
1 badge earned
Challenges come and go, but your rewards stay with you. Do more to earn more!
What goes around comes around! Share the love by gifting kudos to your peers.
Keep earning points to reach the top of the leaderboard. It resets every quarter so you always have a chance!
Join now to unlock these features and more
We're in the process of migrating from on-prem to Atlassian Cloud.
We setup SSO with AAD and that's all working fine for our verified domain.
From the documentation we could find so far, it looks like there is no way we can leverage AAD B2B guests, so we're left with the challenge of configuring password complexity, MFA and access reviews for the partners we work with.
Is there any way of achieving this using only Atlassian Access and without having to create a full account for these external partners in our verified domain?
Any documentation you can please direct us to?
Atlassian Access can only enforce security controls onto the accounts from the domains that you've claimed/verified i.e. "yours".
As such there is nothing you can do with external partners, unless you give them accounts in one of your verified domains.
A good practice is to make their domain distinct from your main one, but keep in mind the resulting email must be usable i.e. reachable – since Cloud will attempt to verify the account by emailing with a link.
Welcome to the community.
As I understand you want to implement SSO for external customers/partners whose domain you do not own. Please correct me if I am wrong.
We may be able to offer an effective solution for your use case. Please reach out to us at email@example.com and we can discuss the same in detail.