Importing existing users from Atlassian Access to Okta for assignment

[Heberto Lorenzo]

Hi! I am currently working on integrating Okta SSO and User provisioning with Atlassian Access. I currently have a couple hundred existing users and  I am trying to import those into Okta so I can map them to existing accounts.

Is there a way to import existing Atlassian users into Okta using the API?

[Ed Letifov _TechTime - New Zealand_ · Accepted solution]

Hello, @Christopher Schmitt and @David Kerry 

1) Assuming the user ACTUALLY has the email address in the mail attribute (this is NOT a given for people without Office365 subscription, or those pushed from on premises AD) this error usually indicates a mismatch in certificates – so re-download the cert from AzureAD, open up in text editor and copy-paste again.

2) The difference in UPN and email, and what you use to login into Azure AD, is irrelevant – Atlassian Cloud keys EVERYTHING on the email address.

3) You may want to check some answers I've provided earlier on how to configure SSO and User Provisioning correctly:

• https://community.atlassian.com/t5/Atlassian-Access-questions/Integrate-Azure-AD-with-Atlassian-Cloud/qaq-p/1852575#M3417
• https://community.atlassian.com/t5/Atlassian-Account-questions/SAML-SSO-with-Azure-AD-does-not-work-when-using-quot-Continue/qaq-p/2085502
• https://community.atlassian.com/t5/Jira-Service-Management/Azure-AD-login-and-incoming-email-not-matching-up/qaq-p/1821809#M88619

In the case of Azure AD/Entra ID, the documentation published (by Atlassian?) to the Microsoft documentation site completely omits a very important detail about setting "Matching Precedence" correctly and could, and indeed has been, misunderstood by the admins. And to complicate this, the default value of that being set to the "User Principal Name" is wrong too in a general enterprise use case, since UPNs can change – it should instead be the Object ID.

[Christopher Schmitt]

Hello,

I have fixed the problem together with Atlassian Support. They were able to tell me exactly where the problem was. There was a problem with the certificate. I added it again and everything worked.

Greetings
Christopher

[Ed Letifov _TechTime - New Zealand_]

@Christopher Schmitt I am glad the problem has been resolved. I would appreciate if you can accept my answer since I seem to have been spot on?

[David Kerry]

We also have the exact same error. Does anyone have any solutions for this?