外部ユーザー セキュリティ ポリシーとは

An external user policy allows you to apply security settings to external users. For example, if you need external users to verify their identity with single sign-on, you can require it through this policy. You can also apply session expiration and block user API tokens. Available external user security policy settings

Create and manage multiple external user security policies

You can create and manage multiple external user security policies to control how different groups of external users access your Atlassian cloud apps. Each policy can be tailored to specific email domains and security settings, giving you more flexibility and control over external user access. The default policy acts as a fallback and automatically applies to any external users not covered by additional policies.

With multiple external user security policies, you can:

• Create policies to apply different security to different groups of external users based on their email domains.

• Assign up to 20 domains to each policy, with a maximum of 10 policies per organization.

To use multiple policies, your default policy must be billable.

請求対象外のポリシー

Users in an external user policy count towards your Atlassian Guard Standard bill. A non-billable policy gives you the flexibility to choose whether or not to include external users in your Atlassian Guard Standard bill. Users in a non-billable external user policy don’t count towards your Atlassian Guard Standard bill. In a non-billable policy, you can only require one-time passcode, set session expiration, and control user API token access. You can’t require single sign-on.

If your default external user policy is set to non-billable, you can’t create multiple external user policies. To create and manage multiple policies, your default policy must be billable.

If you want to make the default policy non-billable, you must delete all additional policies.Make external user policy non-billable

テスト ポリシー

A test policy lets you test external user security settings with up to 5 users before you roll them out to all your external users. If you have Atlassian Guard Standard, the users in your test policy don’t count towards your Atlassian Guard Standard bill. Add a test external user policy

Policy precedence

1. If an external user is explicitly assigned to the test policy, that policy takes precedence over all others for that user.

2. If an external user’s email domain matches a domain assigned to a policy, the security settings from that policy will be applied.

3. If an external user’s email domain is not covered by an policy, the default policy will apply.