Migrating a domain to another organization

[MF (admin@itl)]

Hi, is there a KB reference or similar (or help here :-) ) for migrating a Domain to a different organization.

Here's the story.

Organization A owned B and registered to manage the domains of A & B.

B is now taking its thing elsewhere and the organization will be migrated away from A. However the internet domain (bcompany.com) for B is setup in the directory organization of company A's as one of A's domains.  There are load of Trello users paid & free inside B and I'd rather they didn't lose their accounts. 

I can see that A can delete B's domain - but what happens then - do the accounts get wiped or can B immediately do a proof of ownership and start managing? Will users needs to reset their accounts?

Regards
F

[Connor]

Hi Charan, I encourage you to look through the following Atlassian documentation as it should help guide you in configuring SSO.

• https://support.atlassian.com/security-and-access-policies/docs/configure-saml-single-sign-on/
• https://support.atlassian.com/security-and-access-policies/docs/understand-authentication-policies/
• https://support.atlassian.com/provisioning-users/docs/understand-user-provisioning/
• If using Azure AD
  • https://docs.microsoft.com/en-us/azure/active-directory/saas-apps/atlassian-cloud-tutorial
  • https://docs.microsoft.com/en-us/azure/active-directory/saas-apps/atlassian-cloud-provisioning-tutorial

In my own organization I have SSO and user provisioning configured between Atlassian and Azure AD. The authentication policy configured to use SSO is set as the default policy, so users are added to it automatically. Users are added to AAD groups, and the group members are provisioned in Atlassian and are able to login to Atlassian using their Microsoft 365 credentials.

[gustavo pereyro]

Hi Connor   thank you for you information..   we use Azure an Atlassian Access like you, but my question is :    I know we can provide any groups from Azure, but Is possible for example to define in Atlassian Access the group X for Jira licences users and group Y for Confluence users? ...    in our case we have 1400 licences in jira and 800 in confluene

.

[Connor]

Hi gustavo, what you're describing is possible, in fact I have it setup like that in my org. I have user provisioning setup between Atlassian and Azure AD. In AAD I have created 2 security groups, JiraUsers and ConfluenceUsers, which are synced to Atlassian via user provisioning. In Atlassian, Jira product access is assigned to the JiraUsers group, and Confluence product access is assigned to the ConfluenceUsers group. All my employees are members of ConfluenceUsers so they're licensed for Confluence, but only specific employees are licensed for Jira through membership in the JiraUsers group.

[gustavo pereyro]

Connor, sorry for my delay in answering you
thank you very much for your contribution, excellent detail, thank you, greetings