Moving to SAML

[Marlo Atlassian Account]

So I want to implement SAML from Azure AD to Atlassian. When I verify the domain I see all the staff who have individually signed up to Atlassian using the same domain name. I have set the Product Access to automatically assign the new site to users logging in from that domain. However this doesn't seem to work - presumably because the user already exists without site access. Should I delete all the existing users and get them to sign in again or is there a way to assign site access to these existing users.

[Dave Meyer]

@Logan Scarpace yes, you should be able to do this. Just follow the steps for each separately

https://docs.microsoft.com/en-us/azure/active-directory/saas-apps/atlassian-cloud-provisioning-tutorial

https://support.atlassian.com/security-and-access-policies/docs/configure-saml-single-sign-on-with-ad-fs/

One thing to note: make sure that user emails are consistent between Atlassian, Azure AD, and AD FS. That way you won't run into any problems accidentally provisioning duplicate accounts.