Authentication policies for "external"/invited users?

[Vojtech, Vesely]

Hello,

so our company is most of the time collaborating with other companies on projects in Jira. I am looking for a way to manage security policy for users who were invited to our projects but are not using one of our domains.

On Jira server we used to create an AD account for them with their's organization email but our UPN which could then by used to log in to the Jira Server. On Atlassian Access I am unable to do that because it uses Email instead of UPN (using UPN created issues for us in the past) so the synced user has to use their's organization email to log in. But as it is not domain managed by us, I cannot force them to use MFA or strong password policy.

Basically we are company A, we want to invite person from company B to our project but we want to force our security rules on him as there are sensitive data in the projects.

The authentication policies specify a local directory, but I have no idea how make an account in local directory. Only our managed accounts which are specifically from AAD are displayed.

Any idea would be appreciated.

Thanks

[Kieren _SmolSoftware_]

Hi @Vojtech, Vesely 

Have you tried the External User's feature in admin.atlassian.com? There's more info here: https://support.atlassian.com/security-and-access-policies/docs/control-how-users-outside-your-organization-access-products/

-Kieren
Co-Founder @ Smol Software | Ex-Atlassian