OKTA authentication policy users

[Magdalena Zhisheva]

Hi all, 

We are about to setup multiple authentication policies and OKTA provisioning in our Jira Cloud instance.

I am quite confused with the following:

When the Okta/Atlassian site setup is ready and the users are imported in the related Okta groups will they automatically be part of the default authentication policy?

For example, if you have Confluence Okta group and authentication policy for Confluence users and User1 is in that Okta group, will he automatically became a part of the Confluence Authentication policy or shall be added manually after the initial setup of the OKTA -> Atlassian configuration?

In other words, I am trying to prepare a plan for the configuration and I am not sure if we shall manually add the users to each OKTA group & policy or only the OKTA setup is required?
Moreover, we have Trello Free users, and we won't to have a billable policy for them. Is there anyone who figure it out how to automatically add those users as non billable? (Trello and Jira users have same domain)...

[Magdalena Zhisheva · Accepted solution]

Useful details are in this topic.

[Magdalena Zhisheva]

Useful note:
"Linking your domain(s) to the local directory will not affect users who are provisioned via automatic provisioning(SCIM) - users synced via SCIM provisioning will be added to the default "IdP directory"

There is a feature request related to the Automatic assignment 

or Zapier can be used to achieve that as a workaround.

[Brant Schroeder · Accepted solution]

@Magdalena Zhisheva If you are using Okta as your identity provider to authenticate to Atlassian products Okta will enforce the authentication policies that you specify for the app in Okta.  By default it would use your default policy.  

[Brant Schroeder]

@Magdalena Zhisheva Can you accept the answer to help others?

[Magdalena Zhisheva]

Thanks @Brant Schroeder , 

Thanks for trying to help on that :) yes, it will enforce the default policy specified for the IDP directory but the question here more about automatic authentication policy assignment and I added more details below.

Have a great day ahead! 

BR, Maggie