Deleted account after domain verification - Will user still able to login to old atlassian product

[Raghu Boyapally]

Hi,

We are trying to migrate from Jira On-Prem Server to Jira Cloud. 

In our current environment, there are multiple instance of Jira and other atlassian products like bitbucket, trello, etc by different organizations.

We are trying to setup the new Cloud instance with all security controls (SSO and MFA) before starting or planning for migration. We are having trouble with verifying the domain. We do not want to claim all the accounts listed like Trello, bitbucket, etc from other organizations which would not be migrated into new instance we are creating.

Right now the system is not claiming a subset of the accounts list. 

Can we go ahead and claim all the accounts and later delete the accounts we do not want to be managed under new instance?

After deletion, will the users of the deleted accounts have any issue in accessing and using the existing Atlassian products?

Please help. Your assistance will be very much appreciated.

Thank you,

Raghu

[Prince Nyeche]

Hi @Raghu Boyapally 

If you're asking about deleting the user off from one Instance, if it will affect the same user account in another Instance, then the answer is No. each instance is separate from one another, so you deleting off a user you do not want in one instance will not restrict the user access in another instance. 

[Raghu Boyapally]

Thank you Price for your response.

As mentioned we are setting up a new Jira Cloud Instance and add security controls like SSO. 

When we claimed the accounts (including many existing Free Trello user accounts) and setup SAML SSO Azure AD, the setup worked for new Jira Cloud users but existing trello users had login issues and system was requesting them to Sign-up freshly.

I believe on the Atlassian side, the system was not able to map the existing profiles of the users(especially Trello) to the Users trying to log in through the Azure AD.
We had revert back the changes (delete the saml Config, remove the domain) . After the changes were reverted Trello user were able to login and access their boards.

Have you ever faced this issue?

Thanks,

Raghu

[Prince Nyeche]

Hey @Raghu Boyapally 

Yes, this happens because Trello was added as part of the Organization for the claimed domain. So to go about this, those Trello users need to acknowledge being added by the Org. Usually an email is sent to their email address and they will need to go to that email and click on "connect accounts" for their Accounts to be added to your domain Org.

that way they should login with the SSO to their own Trello account and that becomes linked to your Org. This is a seamless process except those users don't do this, they won't be able to access their Trello account via your SSO.

[Raghu Boyapally]

Hi @Prince Nyeche 

Thank you for your response.

I do not believe Trello users got any email to connect accounts. Is there any action as an Admin (who had claimed the accounts) I need to perform to trigger that email.

I have subscribed to Atlassain Access before doing domain verification, Is that causing the issue. The steps on confluence says verify your domain and then subscribe to Atlassian access. Or do it really matter?

Thank you.

[Prince Nyeche]

Hi @Raghu Boyapally 

No action is required from the Admin, this is automatic as soon as you verify and claim a domain that is being used by the users, they should receive such notification. That doesn't really matter. Probably what you can do here is run a test, if you have a test domain, you can simulate a test to see the behaviour with Atlassian Access and Trello connected to your Azure otherwise, I would suggest you can reach out to Atlassian support so they can help as well, if the users do not get such emails and are not able to link up with your Org after the domain verification.

[Raghu Boyapally]

Thank you @Prince Nyeche 

I have reached out to Atlassian and Trello support teams on the email issue.

Meanwhile, do you have any idea if a claimed account for a group which moves out of the organization. If an Admin changes the email ID, the user will still be able to access their existing boards which were created when they were part of the organization?

[Prince Nyeche]

Hey @Raghu Boyapally are you referring to idea of changing an email address then unclaiming the domain, what happens to the user? If that's your question, the user will still be able to access their board and activities using the new email address as that get linked to their Atlassian AccountId.