How to get SSO Working with Azure on Customer Portal

[Deleted user]

We are setting up SSO to sign in our users to the customer portal. Currently the way we have it setup:

Using IDP-Initiated Flow to SSO users in Azure into Atlassian Cloud. We have run a test within Azure for this SSO configuration and it works, but when we have our users go to https://[organization].atlassian.net/servicedesk/customer/portals it makes them type in their email before it goes through the SSO process. On first time use, it also makes them go through the Microsoft Sign in process and MFA as well (Which this may just be how it is). 

We have gone through the following document to confirm all the settings are set correctly: Enable single sign-on for an enterprise application - Microsoft Entra | Microsoft Learn

Does anyone have an idea on why the customer portal still pops up to type in an email address?

Thanks!

[Dave Meyer · Accepted solution]

Hi @Esther Strom,

That's a great question. We're still working on improving the integration between your Managed Accounts and your Jira and Confluence products. In the meantime, you will need to re-invite them and add them to the groups. It will not create a new account as long as you use the same email address to invite them (accounts are keyed off the email address). All you are doing when you invite a user to your site is "adding" that existing account to your site.

Feel free to reach out to me if you have questions: dmeyer@atlassian.com

Cheers!

Dave

[Esther Strom]

Thanks, @Dave Meyer. So does it work the same way vice versa? We have quite a few newer employees who weren't already here. If I invite them to Jira, will that automatically create the managed account?

[Dave Meyer]

@Esther Strom that's correct. Your managed accounts is just a list of all Atlassian Cloud accounts with an email address that belongs to the domain(s) that you have verified. So if you invite someone that doesn't already have an Atlassian account to your Jira, we will create an account and it will be added to your Jira site, and also show up on your managed accounts list in your organization.