Prepare for and set up Atlassian Access

Atlassian Access (soon to be Atlassian Guard Standard) is an organization-wide subscription that gives you additional features for managing your users, including:

• User provisioning using SCIM

• Single sign-on using SAML

• Security policies (for example, enforcing two-factor authentication)

In most cases, you’ll need Atlassian Access (soon to be Atlassian Guard Standard) to use these features. There are some exceptions – our custom integrations, such as Google Workspace and Azure AD for nested groups, provide some user provisioning and single sign-on capabilities without Atlassian Access (soon to be Atlassian Guard Standard).

To check whether you should use Atlassian Access (soon to be Atlassian Guard Standard), see the following page.

Check whether you need Atlassian Access and a cloud IdP

Before you begin

Check the following information before you start:

Estimate subscription cost and check if you need a non-billable policy

Atlassian Access (soon to be Atlassian Guard Standard) uses a different billing model from other Atlassian cloud products. Atlassian Access (soon to be Atlassian Guard Standard) is billed per organization. This means you only pay once for each managed account in your organization.

Check the number of users

We recommend that you check how many user accounts already exist in your cloud organization, then assess how many will be migrated so you can estimate the cost of your subscription.

Non-billable policy

If you have users that shouldn’t be included in your Atlassian Access (soon to be Atlassian Guard Standard) bill, you can add them to a non-billable authentication policy. These users won’t be covered by the security requirements defined in your authentication policies, such as enforcing two-step verification.

Learn more about authentication policies

New users who can create accounts for themselves

If you don’t want new users who are manually invited, or sign themselves up, to count towards your Atlassian Access (soon to be Atlassian Guard Standard) subscription, you can choose to make the default policy non-billable.

Learn how to configure a nonbillable default policy

Verify your domains and claim managed accounts

To unlock Atlassian Access (soon to be Atlassian Guard Standard) features for your users, you’ll need to verify your domains and claim user accounts for the domain. Unless you decided to use our custom integrations, Google Workspace and Azure AD for nested groups, which will verify your domains during the sync, see the following page.

Learn how to verify domains and claim managed accounts

Enable Atlassian Access for your organization

You can use a 30-day trial for Atlassian Access (soon to be Atlassian Guard Standard). If you need more time, you can also contact our Support team who can extend this trial.

Learn how to get started with Atlassian Access

Next steps

When you’re ready, configure your identity provider. Learn how to configure identity providers for the migration