Setup User / Group provisioning and SSO for BitBucket Cloud Instance

[Christian Humer]

Hello

I want to setup security for our Bitbucket Cloud. It seams that it's not possible via Atlassian Access to setup user/group provisioning and SSO like for the other products of atassian.

Is there a dedicated plan needed to setup SSO?

Can you explain the solutions?

Christian

[Theodora Boudale · Accepted solution]

Hi Christian,

While user provisioning with Atlassian Access is not possible for Bitbucket Cloud, SAML SSO is. Please see the details below:

User provisioning

This feature is on our roadmap:

https://www.atlassian.com/wac/roadmap/cloud?selectedProduct=bitbucket&search=user%20provisioning

You can add yourself as a watcher to the following feature request if you'd like to get notified via email on updates:

• https://jira.atlassian.com/browse/ACCESS-621

In the meantime, you can create user groups manually from your workspace's Settings > User groups and invite/add users to each group. Users can also be given direct access to a repository via a repo's Repository settings > User and group access > Add members.

We also have API endpoints for creating user groups:

• https://support.atlassian.com/bitbucket-cloud/docs/groups-endpoint/

Inviting a user to a user group:

• https://support.atlassian.com/bitbucket-cloud/docs/invitations-resource/

Inviting a user to a single repo:

• https://support.atlassian.com/bitbucket-cloud/docs/invitations-endpoint/

SAML SSO

SAML SSO can be configured with Atlassian Access and it will apply to Bitbucket Cloud users as well. There is an option in https://admin.atlassian.com/ (for Org Admins) called Authentication policies. You'll need to configure and save SAML and then enforce SAML single sign-on in an authentication policy. SSO will then apply to all users that are added under an SSO-enforced authentication policy; so, if your Bitbucket Cloud users are added to such a policy, they will need to use SSO to log in to Bitbucket Cloud.

If you have any questions, please feel free to let me know.

Kind regards,
Theodora