Can an Atlassian account with an email NOT in a verified domain use SAML single sign-on

[Laukii Cheng]

Our Jira domain: companyone.com

Example Atlassian account email: username@custdomain.com

1. We are unable to do domain verificaion because our customers own custdomain.com

2. We would like our customers to be able to use their company's email address (username@custdomain.com) to sign in through single sign-on to access Jira Service Desk in order to view and submit requests.

• User clicks on a link that redirects them to https://companyone.com/secure/Dashboard.jspa
• Redirect to identity provider configure for SAML sso
• Authenticate with IDP using customer's email address (non verified domain)
• Redirect back to to https://companyone.com/secure/Dashboard.jspa

Documentation Referenced:

https://confluence.atlassian.com/cloud/manage-jira-service-desk-customer-accounts-913213935.html

Atlassian account - You can also configure SAML single sign-on for these accounts. 

https://confluence.atlassian.com/cloud/saml-single-sign-on-943953302.html

Note that SSO will only apply to user accounts from your verified domains.

[Mohamed Faiz]

Hi Laukii,

No, it is not possible to configure SSO without configuring  Atlassian access for your cloud site. Suppose if some other user who is part of some other organization has enabled SSO from his site and if he gets invited to your site his SSO will still be valid since his organization is linked to Atlassian access. Just go through documentation which talks in-depth about SSO and Atlassian access:

Security with Atlassian Access

Regards,

Mohamed Faiz