Syncing our Local AD user list with the Cloud

[Vanessa Becker]

Our Head of IT is concerned with users now having to remember another set of log in details. i.e. on the server they were synced with AD hence all the login details were the same. On the cloud you log in with your email address and chosen password.

Question 1

Is there any way you can change your login details on the cloud so that you don’t log in with your email address but rather your AD credentials?

Example

On the server instance I log in with beckerv

On the cloud instance I log in with vanessa.becker@guchi.co.za

Can you change vanessa.becker@guchi.co.za to beckerv to log in to the cloud or must you use your email address to log into the cloud?

Question 2

Is there any way you can sync your local AD with the Cloud?

[Donald Singleton]

Atlassian Access, allows ad sync and SSO. It is an additional cost. 

[Oksana Dersovitz]

I second this. We pay for Atlassian Access and integrate with ADFS.

[Lisa Grau]

Hi Vanessa,

most of your questons should be solveable with Atlassian Access. Do you have Atlassian Access licensed for your Cloud domain?

https://support.atlassian.com/migration/docs/atlassian-access-and-cloud-migrations/

https://docs.microsoft.com/en-us/azure/active-directory/saas-apps/atlassian-cloud-tutorial

[Darshan Mandhane]

First of all, you need to install/add the "Atlassian Access" Product. Once done, it becomes very easy to integrate with an identity provider.

https://support.atlassian.com/migration/docs/atlassian-access-and-cloud-migrations/

https://docs.microsoft.com/en-us/azure/active-directory/saas-apps/atlassian-cloud-tutorial

[Kathi Paquet]

There are many add-ons to do this.  You can go to Marketplace and search.  I have used the following:

• Okta
• AzureAD JIRA sync

Hope this helps some.

[Stéphane Veraart]

Kathi, I think those don't provide the solution. 

Atlassian currently has a monopoly on providing access to Cloud products from Azure AD or any other IDP (Google, Okta or other).

Even for the synchronisation Atlassian Access is needed:

https://support.atlassian.com/provisioning-users/docs/configure-user-provisioning-with-an-identity-provider/

If there is someone who knows a way around Atlassian Access, I am very curious because thus far I have not been able to discover this.