Create
cancel
Showing results for 
Search instead for 
Did you mean: 
Sign up Log in

SSO map user group

Nigel Wu March 14, 2022

We'd like to sync both users and groups from our IDP(Auth0) to Atlassian.

In the document https://support.atlassian.com/security-and-access-policies/docs/configure-saml-single-sign-on-with-an-identity-provider/, it shows that we can only sync users. 

Is it possible to sync IDP groups to Atlassian groups when users login?

For example, another SAML mapping for user group.

2 answers

1 accepted

2 votes
Answer accepted
Ed Letifov _TechTime - New Zealand_
Rising Star
Rising Star
Rising Stars are recognized for providing high-quality answers to other users. Rising Stars receive a certificate of achievement and are on the path to becoming Community Leaders.
March 15, 2022

Atlassian only supports group sync via SCIM protocol in the background, not via SAML claims in the frontend.

Auth0 does not support SCIM.

So the real answer in your case is "no"

Nigel Wu March 17, 2022

It's weird that Atlassian doesn't support group syncing via claims. Thanks for your answer. 

0 votes
Dave Meyer
Atlassian Team
Atlassian Team members are employees working across the company in a wide variety of roles.
March 15, 2022

Yes, we support group syncing with a number of major cloud identity providers. See https://support.atlassian.com/provisioning-users/docs/understand-user-provisioning/

Wadhwani, Piyush
I'm New Here
I'm New Here
Those new to the Atlassian Community have posted less than three times. Give them a warm welcome!
January 31, 2024

This is not what OP is asking, atlassian should support saml group claims as part of login response. 

Suggest an answer

Log in or Sign up to answer
TAGS
AUG Leaders

Atlassian Community Events