How do you setup unverified in Access and SSO or SCIM

keinhaus-kein
I'm New Here
I'm New Here
Those new to the Atlassian Community have posted less than three times. Give them a warm welcome!
June 15, 2021

We need to add contributors across over 20 different domains. These are outside users from outside companies. How do setup SSO or SCIM if you have no ability to verify their domain?

1 answer

0 votes
Jayant Suneja
Atlassian Team
Atlassian Team members are employees working across the company in a wide variety of roles.
June 16, 2021

Hi,

Though it's not possible to enable SSO without verifying the domain, we have released a new feature that allows you to provision users outside your verified domain to Atlassian via SCIM. Please refer:

Provision-users-from-outside-your-verified-domain-to-atlassian-products 

Here is the scope of this new feature:

  • External accounts in your IDP can be added to the site via provisioning
  • External accounts in your IDP can be added as members to the provisioned groups

What's not in the scope of this feature:

  • We will not sync attributes from the IDP to the external accounts in Atlassian (i.e., Display Name, Job Title, email address, etc..).
  • When an external account is deactivated on your IDP, the Atlassian Account will not be deactivated. Instead, the accounts will be removed from the provisioned groups.
    • If the external user is part of any local group on the site, those need to be removed manually from the site administration of mogroup.atlassian.net.
    • The remaining account on the site (without any group membership) will need to be also removed manually.
  • If a new provisioned external account is not yet known to Atlassian, the end-user will still need to complete the account creation by verifying their email address mailbox.

Regards,
Jayant

Suggest an answer

Log in or Sign up to answer
TAGS
AUG Leaders

Atlassian Community Events