How to grant access to Trello from Atlassian Administration?

[Jesper]

So I'm trying to get SSO working on our Atlassian products, and it works like a charm on Jira and its related products.

Then I found out a department was using Trello, something they had started and managed on their own using their work emails. With SSO on, they now didn't have access.

Not a problem, or so I thought. I presumed I could add Trello as a product in Atlassian  Administration and then grant them access as I had done with all the other products. 
But it seems to be only Trello Enterprise that can be "added"/linked to the Atlassian Administration site, and Enterprise is overkill for Trello as only 5 people need access. 

I have tried adding some of them to the Directory, through Azure AD - but still get an error that they don't have access to Trello.

Question: So my question is how do I grant users access to Trello while having SSO on - without going Enterprise? 

[Ed Letifov _TechTime - New Zealand_ · Accepted solution]

Hello, @Jesper 

SAML SSO via Atlassian Access that you configure in Atlassian Administration is SSO "into the whole Atlassian Cloud" – this is authentication only, not authorisation (access to products).

Only once you managed to login into Cloud via SSO, your groups (from your IdP or "local" ones on various Cloud sites) will via site-specific product access define what you have access to on these sites.

For Trello authorisation is defined in Trello. Once you log in via SSO i.e. your email address is successfully identified by Atlassian Cloud, Trello decides whether to give you access to a board or workspace. This is no different from you logging in via password credentials on Atlassian login page and then proceeding to Trello.

As such this shouldn't be the case:

With SSO on, they now didn't have access.

Something else is interfering. Can you share how the error looks like?

[Jesper]

Ahh, so that might be the issue - they didn't have access to any of the other Atlassian products as Trello is the only product they need.

I will add them to a product, then see if that solves the problem and if I can remove it again afterward. 

Thank you kindly the help

[Ed Letifov _TechTime - New Zealand_]

Hello @Jesper 

I assure you this has nothing to do with other products. I merely mentioned this to demonstrate that authentication via SSO goes first, then groups influence authorization to products and since other products are organised in sites – access to site. 

[Gonchik Tsymzhitov]

@Ed Letifov _TechTime - New Zealand_  Thanks for that explanation.