Confluence - JIT Provisioning Azure AD SSO Question

[Lance Redden]

Hi All,

Reaching out to the community base as the Atlassian documentation isn't too clear on this specific subject.

Our Company is currently using Azure AD as our IDP and we are looking to provision users via the "SSO for Atlassian Data Center" plugin as it appears to be a supported feature. I have the SAML authentication working just fine and that works great for existing users, but it would be nice for new users coming onboard to just be auto-provisioned an account when logging in with their company issued Microsoft Account.

I've got most of the information figured out such as the attributes for display name, and email address. But there is a field called "Groups" I'm not entirely sure what is actually supposed to go here. I would like to map Azure AD groups, to existing local confluence groups if possible.

Any help would be greatly appreciated !

[Brant Schroeder]

@Lance Redden welcome to the Atlassian community

It could be one of two things, groups in AD or groups in Jira.  Looking at their documentation https://confluence.atlassian.com/enterprise/jit-user-provisioning-1005342579.html  I believe that it is the AD groups that you will be using to provide access.  

[Brant Schroeder]

@Lance Redden If this answered your question can you please accept the answer to help others?