User provisioning problem

[Lazarovský, Jakub]

Hello,we are experiencing a some problem in our Jira cloud instance in our organization.

We are the Czech Technical University and every faculty has own subdomain.

The main domain is cvut,cz

Our faculty domain is fit.cvut.cz

Every user (student,partner,...) has university created account like "username@cvut.cz" and,depends on which faculty is student studying,has alias "username@fit.cvut.cz"

Our problem is,that our Jira instance is running on fit.cvut.cz domain,so we cannot verify domain cvut.cz.

The problem is,when user want to login to our instance,which uses SAML SSO and user provisioning,if he will use "username@fit.cvut.cz",everything is ok,Jira automatically redirect to our SSO server.But,when user will use "username@cvut.cz",it will create new local jira account.Then,we  got duplicated accounts in Jira,and,other users doesn't know,which account to use when they are replying,and also,sometimes one user use to login username@cvut.cz,sometime,the same user,uses username@fit.cvut.cz,so we cannot explicitly say,use only this username,becouse on our university systems,all aliases are working.

So,the question is,how we can resolve this issue,if we cannot manage main cvut.cz domain?We need to make users login work in every aliases,which users have (there are also more subdomains,which usesrs can have as alias,it depends on relationship to university).

Thank you

[Steven Haworth]

That is an interesting situation at your university.  We have a somewhat similar problem - we have about 5 global 'regions' in our company, and each have their own Microsoft 365 / Teams instance (and their own domain identity).

We are using cloud, and could enable SSO to one of those instances, but (as far as I know) there is no method to enable SSO to multiple 365 instances at the same time.

So, we have to manage all of those users individually in terms of adding them to our cloud instance.

[ASP Systems]

Hello @Lazarovský, Jakub ,

You are able to verify multiple domains on Jira as to my knowledge and even if it was a subdomain but you need to follow the same domain verification process for the sub-domain that is add txt records to your dns.

I don't know if that answered your question.

Best regards,

[Lazarovský, Jakub]

hello @ASP Systems ,

I know about verification a more domain.

For now,my question is,we provisioned users to our Jira cloud,explicitly with email address username@fit.cvut.cz,

My question is,if i will verify domain cvut.cz,where the same accounts exists,but with mail username@cvut.cz,what will happen?

Thank you

[ASP Systems]

Hello again, they will be treated as two different accounts you either need to delete the accounts that are duplicates which are not associated with a mail box and keep those that do have a mailbox which are added by domain verification but making sure they don't lose their activity in the process. Jira will treat these account as two different accounts and it will be choatic to administer.