SSO still requires to enter email.

[Mantas Geležinis]

Hello,

We are trying to implement SSO using Atlassian Access and we are facing little problem.

Situation: We have Cloud instance and separate app that is using same users from OneLogin directory. When first login is initiated in our app and then we go to Jira Cloud we are required to enter an email. If email ends up with verified domain Jira redirects us to Single Sign-on provider and log us in.

Problem: We want to avoid entering email if we are already authenticated with our identity provider. Is it possible?

[Boris Berenberg - Atlas Authority · Accepted solution]

The only way to bypass entering your email would be to have the user start from the SSO tool. For example, clicking the chicklet in Okta or something.

[Mantas Geležinis]

Thank you Boris!

I was able to retrieve users jira app ID from onelogin api and generate same url as onelogin uses to redirect after clicking that clicklet. 

https://{mydomain}.onelogin.com/client/apps/select/{userAppID}/?RelayState={redirectURl}

OneLogin api endpoint for userApps:
https://developers.onelogin.com/api-docs/2/users/get-user-apps