Implement Atlassian Guard for multiple organizations in the same company

[margareta_kluge]

If we have several organizations which have been managed independently and cannot be merged due to the complexity of the setup, is it possible to implement Atlassian Guard to setup SSO and authentication policies for all these organizations in the same place?

[Lindsay Bolan]

I'm actually implementing this myself right now, and the short answer is mostly yes. Once an Atlassian Cloud account is managed and has single sign-on set up, that SSO will follow the account regardless of what Atlassian Cloud orgs, sites, or products the individual is granted access to.

The one portion I am less sure of is the authentication policies. The "External users" policy would govern any account not claimed/managed by a particular org. I'm not sure how/if changing the authorization method would affect my SSO users on someone else's site. I do know that API token access is set per org, so for instance users are blocked from creating API tokens for the SSO org but I know they can and have created API tokens on other orgs.