One entra ID, two atlassian tenant. Is it possible

[Olivér KIS]

Hello Everyone,

Is it possible to establish SAML/SSO from a single Entra ID tenant with multiple Atlassian envinroment?

In our case the parent company has one big Entra ID with all the users of the subsidiaries. To separate admin rights completely, some of the subsidiaries require their own Atlassian tenant. I would love to compromise and use project admins as a middle ground, but the daughter company managing the Atlassian tenant is refusing to give any kind of admin access to anyone else but them. So, is it possible to establish SAML/SSO/Auto Provisioning, with 2 or more Atlassian tenant at the same time?

Thanks in advance 

[Marc - Devoteam · Accepted solution]

Hi @Olivér KIS 

This should be possible to have multiple Atlassian tenants where you verify the same domain.

This as I can connect multiple IDP's to a single site as well.

I suggest to try this on multiple Atlassian tenants.

There probably just needs another connection created at the MS side.

[Olivér KIS]

Thank you, that is reassuring to hear. Is there any documentation on it maybe?

[Marc - Devoteam]

Hi @Olivér KIS 

No not that I'm aware as in an Atlassian instance you can connect multiple domains.

I think its simply repeating the steps on Atlassian side and MS side on connecting both.

Doe this again, just for the other Atlassian Instance

https://learn.microsoft.com/en-us/entra/identity/saas-apps/jiramicrosoft-tutorial 

[Hector Menchaca]

Hello @Olivér KIS ,

Thanks for contacting Atlassian Community!

Short Answer: is not possible without an Enterprise license.

As of now only Enterprise customers are able to setup multiple Identity Providers, you can find more information on this FR we have:

• https://jira.atlassian.com/browse/ACCESS-1526

Regards,

Thanks!

[Olivér KIS]

Hey, thank you for your answer, but I am interested in the opposite. I have one Entra ID tenant, and I want to connect it to multiple atlassian tennant. And by that I mean, I want to authenticate from xx.onmicrosoft.com to xx.atlassian.net and yy.atlassian.net. Is this possible?