nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

I have many users, I want to enable SAML with Entra for some of them...

Robin Ward_2vx1vu

I have many users with the same domain.

I've verified that domain.

I've only claimed some of the users so far to test, and now I'd like to enable SAML.

If SAML enrolls all managed users, does that mean that even after i've enabled it, only those I claimed will be authenticated through Entra, and the rest can continue as before - even those with the same domain? OR, once I add the Domain to SAML, does it force everyone to use Entra?

Also, will I be able to go back and claim more users, to become managed, once i've got the process right?

Thanks

Accepted answers

Hector Menchaca

Hello @Robin Ward ,

Welcome to Atlassian Community!

Basically it works this way:

You verify the domain and you just claim 5 users let's say.
Then you configure SAML SSO - and a SSO authentication policy is created.
At this moment exactly any user will login through SAML SSO.
You need to add the users to your SAML SSO policy and then enable the policy and only the users on this policy will be able to login with SAML SSO.

You can find more information in the following links:

Thanks!

All comments

Hector Menchaca

Hello @Robin Ward ,

Welcome to Atlassian Community!

Basically it works this way:

You verify the domain and you just claim 5 users let's say.
Then you configure SAML SSO - and a SSO authentication policy is created.
At this moment exactly any user will login through SAML SSO.
You need to add the users to your SAML SSO policy and then enable the policy and only the users on this policy will be able to login with SAML SSO.

You can find more information in the following links:

Thanks!

A A Ron Geister _Trundl_

I do believe you can add users to specific policies so that you can omit them from the SSO policy but as Hector from Atlassian said it would be better to not claim those accounts that you don't want to force SSO upon.

Robin Ward_2vx1vu

So these changes will only ever affect claimed/managed users? And I just need to add those claimed/managed users to the specific Authentication Policy i've setup for SAML Accts to Entra, while unmanaged accts will login as before is that right?

I understand the Authentication policies, and I have 2 already, one "local auth" and one Entra for SSO. It seems the only users I can add to either are Managed users.