Migrating to SAML. Test environment, and user logout questions.

[Harry Sheppard]

Hi Everyone,

I am looking to migrate my organisation to use SAML single sign on, specifically with Azure AD, and have some a couple questions about the process.

One, is is possible to have some test environment, to ensure that SAML is working correctly, without affecting my users logins? Since Atlassian Access is configured organisation wide, I can't create a separate site to test in, can I?

Two, since user sessions will persist through the migration to SAML (as far as I have gathered from the documentation), will I need to have my users log out, then log back in before I would be able to manage their access through my identity provider (Azure AD)? If a user hasn't logged in with SAML, I would think that their session is not associated with their account on the ID provider. Or is the ability to disable users from the ID provider only available once I set up user provisioning?

Cheers,

Harry

[Craig Castle-Mead]

Hi @Astrid Sieben 

On the user management side - Atlassian Access is only available per domain - you cannot select which products and/or users you want to enforce

Ref: https://support.atlassian.com/organization-administration/docs/what-is-an-atlassian-organization/#Atlassianorganizations-Manageuseraccountsforanorganization

You can also chose to have Products as part of your Access Organisation, however that centralises billing and management of the product, not the users within that product.

CCM

[Astrid Sieben]

Thanks, @Craig Castle-Mead : That was my understanding, too. So thanks for confirming.