It's not the same without you

Join the community to find out what other Atlassian users are discussing, debating and creating.

Atlassian Community Hero Image Collage

Is it possible to use a mix of Atlassian and SAML accounts?

I am considering setting up SAML authentication on our subscription but we currently have a mix of Internal users and External users using the application.  I'd like Internal users to authenticate using SAML but would still like the possibility of providing contractors access using the Atlassian account.  Is this possible?

1 answer

1 accepted

1 vote
Answer accepted

Hi Chris

It is possible. Here's the authentication flow when you mixed those two authentication options:

  1. When you are trying to login to Atlassian Cloud, the login form asks you to enter your email address first
  2. The login form behaves based on your email address:
    • If the entered email address's domain is verified and its organization enables SAML integration, you will be redirected to the SAML IdP's form
    • If not, you will be asked to enter your Atlassian Cloud's password

 

Screenshot 2018-06-22 10.33.59.png

 

Hope this helps.

Thank you for the clear and concise response. I was also wondering if this would be possible.

i05 Atlassian Team Jun 26, 2018

Glad to hear my response was helpful for you, Wilfried. And thanks for voting up the answer. Please feel free to ask in the community if you have other questions.

Hi

but then we can't use User and Group provisioning from Azure to Atlassian Cloud Products as we can't assign external users to our provided groups. Is that correct?

So am I right then, that only SAML work and provisioning of our "internal" ( aka verified domain) users?

 

thanks and regards, Damian

i05 Atlassian Team Oct 01, 2019

Hi Damian,

Both are correct. Maybe you want to provide an email address to external users (which can have a different domain from the one for internal users) if you need to manage them with Atlassian Access.

But this Mail Adress we would provide must contain a verfied domain?

That is correct. You can associate multiple domains with an organization.

Suggest an answer

Log in or Sign up to answer
Community showcase
Asked in Atlassian Access

AMA: Cloud Identity & Security with Dave Meyer, Group Product Manager

Update: That's a wrap! Thanks so much for your questions. If you didn't make it for the live AMA, not to worry. Add your questions below and I will get to them ASAP.  Hello Atlassian Community...

1,548 views 15 9
View question

Community Events

Connect with like-minded Atlassian users at free events near you!

Find an event

Connect with like-minded Atlassian users at free events near you!

Unfortunately there are no Community Events near you at the moment.

Host an event

You're one step closer to meeting fellow Atlassian users at your local event. Learn more about Community Events

Events near you