Hi all,
we have the current setup:
All employees are told to use Microsoft as Authenticator and not creating plan Atlassian accounts with their mail. Unfortunately they often try to login through the normal Atlassian login instead of using Microsoft SSO.
Can we somehow disable the possibility of create Atlassian accounts with our domain to prevent them to login with plain Atlassian account and then always requesting for access?
Also we introduces Jira Service Management. If I now want to allow all internal users as customers I need to add our domain to the list of approved domain. But that I can not do because then they will keep creating plain Atlassian accounts and then also would be able to access the applications with wrong account.
We also have external users we invite to our applications (all kind of Identity Provider possible depending on the external IT (Google, MS, Atlassian)) and we use our Atlassian accounts on some external Atlassian products. Both needs to be still possible.
Any ideas on that?
Thanks
Hello @Pascal Grunau
Thank you for reaching out.
Unfortunately, it is not possible to prevent the creation of Atlassian Accounts for a specific claimed domain. We have a feature request created to consider this possibility in the future:
Ability to restrict Atlassian account creation for claimed domain
Please, feel free to vote and watch the suggestion to increase its priority and receive updates.
Regarding the statement below:
Also we introduces Jira Service Management. If I now want to allow all internal users as customers I need to add our domain to the list of approved domain. But that I can not do because then they will keep creating plain Atlassian accounts and then also would be able to access the applications with wrong account.
Although you should add the approved domain, you can remove the application access to any new accounts that sign-up with that domain. This will prevent new Atlassian accounts from accessing Jira internally (They will be limited to the customer portal) and will not be counted as paid licenses in your billing.
You can follow the steps below to properly prevent your users with the approved domain from automatically sign-up for new products on your site:
Let us know if you have any questions.
With this solution the users still can create Atlassian accounts "by accident" and then wonder why they don't have access to any products, right? Unfortunately lots of the users log in with the wrong method from time to time. So maybe the safest way would be to add them manually to the customer portal.
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
Hi @Petter Gonçalves ,
If not possible to stop Atlassian account creation, can Access block Atlassian account login?
We'd like to accept idP login only.
Kind regards,
Carlos
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.