Attempting to set up SSO with GSuite domain *Updated*

[Elijah Lapson]

Ok here is the scenario. I want to set up SAML SSO with our Gsuite domain so that Jira service desk users do not need to log in (after logging into their google account). We have a trial version of Jira Service desk as well as a trial version of Atlassian Access. Initially I turned on managed accounts through the GSuite Admin setting using my admin account to verify the domain. Big mistake once the user sync completed all users get an confusing email telling them their account is now managed etc. What I want is SAML SSO to start without sending messages to all users. After reading the documentation it seemed that in order to enable SSO I first needed to disable the managed accounts Gsuite connection which I did (resulting in another mass email to all users). After this step the GSuite doamin is no longer verified. I have now sucessfully verified the GSuite domain but I am not getting the option to configure SSO under the Organization - Security - SAML Single Sign On link in the Admin interface. Although the domain shows as verified I am not getting the SAML config options.

Can someone assist me getting SAML set up and then managing the accounts from the GSuite side without sending out emails to everybody without any warning?

Update: Here is the question. Do I need to claim all the accounts from my verified GSuite domain in order to enable SAML SSO? I would like to avoid sending another email to everyone but I will if that is the only way to enable SSO betweent the GSuite domain and Atlassian Access. 

Thanks in advance,

Elijah Lapso

[Jimmy Seddon · Accepted solution]

Hi @Jozef Vodny,

Atlassian Access exists outside of the context of Jira or Confluence and is used to provide additional user administration as the Atlassian Organization level of your instance.  This allows you to use a third party identity platform (Azure AD, Okta, etc.) and SSO authentication.  It is licensed for every user that will be accessing any other Atlassian product.  For example:

If you are planning to have 10 users for Confluence and those same 10 users will also be a part of your 50 users for Jira, you would need to have 50 Atlassian Access licenses.

But, if your Confluence users were going to be 10 different users from the 50 Jira users you would need 60 Atlassian Access licenses.

I hope that helps!

-Jimmy

[Jozef Vodny]

Hi Jimmy

thanks for explanation ...it more clear now for me :)

just to be sure also with Confluence. Is it possible to use Confluence Free version for 10 users and also to use JIra Software for 50 users (included 10 confluence users) to use integration between Confluence and JIRA Software for example for meeting minutes with creating task in Confluenced and automatic created in JIRA (this integration will be used just for 10 users).

Or it have to be same level from point of view counts of users for JIRA and Confluence ? 

[Jimmy Seddon]

Hi Jozef!

The integration is available for free instances, so yes you will be able to use it with simply the free version of Confluence.

-Jimmy

[Jozef Vodny]

thanks Jimmy