Disable Atlassian account creation for own domain

Pascal Grunau August 19, 2022

Hi all,

we have the current setup:

  • Atlassian Access in place
  • sync users and groups from Microsoft AzureAD
  • Obviously verify our domain and hove all user managed

All employees are told to use Microsoft as Authenticator and not creating plan Atlassian accounts with their mail. Unfortunately they often try to login through the normal Atlassian login instead of using Microsoft SSO.

Can we somehow disable the possibility of create Atlassian accounts with our domain to prevent them to login with plain Atlassian account and then always requesting for access?

 

Also we introduces Jira Service Management. If I now want to allow all internal users as customers I need to add our domain to the list of approved domain. But that I can not do because then they will keep creating plain Atlassian accounts and then also would be able to access the applications with wrong account.

 

We also have external users we invite to our applications (all kind of Identity Provider possible depending on the external IT (Google, MS, Atlassian)) and we use our Atlassian accounts on some external Atlassian products. Both needs to be still possible.

 

Any ideas on that?

 

Thanks

2 answers

1 accepted

0 votes
Answer accepted
Petter Gonçalves
Atlassian Team
Atlassian Team members are employees working across the company in a wide variety of roles.
August 22, 2022

Hello @Pascal Grunau

Thank you for reaching out.

Unfortunately, it is not possible to prevent the creation of Atlassian Accounts for a specific claimed domain. We have a feature request created to consider this possibility in the future:

Ability to restrict Atlassian account creation for claimed domain

Please, feel free to vote and watch the suggestion to increase its priority and receive updates.

Regarding the statement below:

Also we introduces Jira Service Management. If I now want to allow all internal users as customers I need to add our domain to the list of approved domain. But that I can not do because then they will keep creating plain Atlassian accounts and then also would be able to access the applications with wrong account.

Although you should add the approved domain, you can remove the application access to any new accounts that sign-up with that domain. This will prevent new Atlassian accounts from accessing Jira internally (They will be limited to the customer portal) and will not be counted as paid licenses in your billing.

You can follow the steps below to properly prevent your users with the approved domain from automatically sign-up for new products on your site:

  1. Navigate to your approved domain page (admin.atlassian.com > Products > User access settings)
  2. Click to edit the approved domain
  3. Set the Product role of the products to "None"

Screen Shot 2022-08-22 at 4.20.11 PM.png

Let us know if you have any questions.

Pascal Grunau September 5, 2022

With this solution the users still can create Atlassian accounts "by accident" and then wonder why they don't have access to any products, right? Unfortunately lots of the users log in with the wrong method from time to time. So maybe the safest way would be to add them manually to the customer portal.

0 votes
Carlos Chang
Contributor
August 15, 2023

Hi @Petter Gonçalves ,

If not possible to stop Atlassian account creation, can Access block Atlassian account login?

We'd like to accept idP login only.

Kind regards,

Carlos

Suggest an answer

Log in or Sign up to answer
DEPLOYMENT TYPE
CLOUD
TAGS
AUG Leaders

Atlassian Community Events