Trouble removing a site-admin, please share the steps

[smohanty]

Hi, I went through the available earlier posts, but it doesn't seem to be helpful to me. I tried removing a site-admin, who is no longer associated with our organization. Inspite, of following all the steps available in the earlier posts, I cannot remove the user from the site-admin group.

Please note, I'm the primary contact for my organization as well.

[John Price]

I don't have an answer but have a similar error.  We have Okta SSO set up and due to a merger, logins are from two domains (both verified).  Users from one can log in but users from the other get the above error.  I will file a support case. 

[Gareth Blake-Coggins]

Did you get a resolution for this error? - we are also seeing this error

[John Price]

In our case we had several problems. One was that the AD attribute mapping needed to be different for each org (email, name, etc. weren't stored the same way in the two source directories), so the identity team added some logic like "if domainA.com, pass X to Atlassian else pass Y to Atlassian".  Another was that the new IdP feature had to be toggled on by Atlassian for our org.  I would reach out to support for this; given that they have added/changed a lot around Access lately (for the better), there could be something non-obvious going on.

[Gareth Blake-Coggins]

That's great thank you 

[John.Chung]

do you have solution

We have 2 organization A,B

each organization auth different email domain

Org A auth email domain users @ovspa.com

Org B auth email domain usres @gcc.computo

all @a.com,@b.com, @c.com belong to our AD

users login Org A can auth by our ADFS

users login Org B, after auth by ADFS (same)  it return error  error=access_denied&error_description=authentication-policy-strategy-mismatch

do you have solution to fix it?