Create
cancel
Showing results for 
Search instead for 
Did you mean: 
Sign up Log in
Celebration

Earn badges and make progress

You're on your way to the next level! Join the Kudos program to earn points and save your progress.

Deleted user Avatar
Deleted user

Level 1: Seed

25 / 150 points

Next: Root

Avatar

1 badge earned

Collect

Participate in fun challenges

Challenges come and go, but your rewards stay with you. Do more to earn more!

Challenges
Coins

Gift kudos to your peers

What goes around comes around! Share the love by gifting kudos to your peers.

Recognition
Ribbon

Rise up in the ranks

Keep earning points to reach the top of the leaderboard. It resets every quarter so you always have a chance!

Leaderboard

Come for the products,
stay for the community

The Atlassian Community can help you and your team get more value out of Atlassian products and practices.

Atlassian Community about banner
4,467,448
Community Members
 
Community Events
177
Community Groups

Is it possible to use a mix of Atlassian and SAML accounts?

I am considering setting up SAML authentication on our subscription but we currently have a mix of Internal users and External users using the application.  I'd like Internal users to authenticate using SAML but would still like the possibility of providing contractors access using the Atlassian account.  Is this possible?

1 answer

1 accepted

5 votes
Answer accepted

Hi Chris

It is possible. Here's the authentication flow when you mixed those two authentication options:

  1. When you are trying to login to Atlassian Cloud, the login form asks you to enter your email address first
  2. The login form behaves based on your email address:
    • If the entered email address's domain is verified and its organization enables SAML integration, you will be redirected to the SAML IdP's form
    • If not, you will be asked to enter your Atlassian Cloud's password

 

Screenshot 2018-06-22 10.33.59.png

 

Hope this helps.

Thank you for the clear and concise response. I was also wondering if this would be possible.

K_ Yamamoto Atlassian Team Jun 26, 2018

Glad to hear my response was helpful for you, Wilfried. And thanks for voting up the answer. Please feel free to ask in the community if you have other questions.

Like Johnny Hermann likes this

Hi

but then we can't use User and Group provisioning from Azure to Atlassian Cloud Products as we can't assign external users to our provided groups. Is that correct?

So am I right then, that only SAML work and provisioning of our "internal" ( aka verified domain) users?

 

thanks and regards, Damian

K_ Yamamoto Atlassian Team Oct 01, 2019

Hi Damian,

Both are correct. Maybe you want to provide an email address to external users (which can have a different domain from the one for internal users) if you need to manage them with Atlassian Access.

But this Mail Adress we would provide must contain a verfied domain?

That is correct. You can associate multiple domains with an organization.

Sorry for digging this old question. 

I would like to know, how to associate multiple domains with an organisation?

Secondly, If multiple domains are associated with an organisation, can the external users have their own Jira organisation verified domain?

Like # people like this

Suggest an answer

Log in or Sign up to answer
TAGS

Atlassian Community Events