Moving to SAML

[Marlo Atlassian Account]

So I want to implement SAML from Azure AD to Atlassian. When I verify the domain I see all the staff who have individually signed up to Atlassian using the same domain name. I have set the Product Access to automatically assign the new site to users logging in from that domain. However this doesn't seem to work - presumably because the user already exists without site access. Should I delete all the existing users and get them to sign in again or is there a way to assign site access to these existing users.

[Pramodh M · Accepted solution]

Hi @Kunal Saraf 

No, we cannot!! It's not possible

We cannot change the way how authentication works for a cloud application.

Buy Access and Enjoy the features. There is already an application with so many features built for customers and why do you want to build it again with API's?

[Kunal Saraf]

@PR Thanks for the details. Got your point.

[Nic Brough -Adaptavist- · Accepted solution]

No, you'd need to change all the user authentication code in Jira to enable it to use another external directory, and you can't do that in Cloud.  There is never going to be an API for code that doesn't exist!

[Kunal Saraf]

@Nic Brough -Adaptavist- As you know Atlassian Access is at much higher cost. I was exploring if there is any way to utilize the APIs for authenticating using AD.

[Kevin Sun]

Hi Atlassian,

We are currently using Active Directory in our organization.  Can we set up authentication with our AD directly to JIRA cloud?

Please share,

Thanks,

Kevin.

[Nic Brough -Adaptavist-]

Um, see the question and accepted answers.