Prepare for and set up Atlassian Guard

Atlassian Guard Standard (formerly known as Atlassian Access) is an organization-wide subscription that gives you additional features for managing your users, including:

• User provisioning using SCIM

• Single sign-on using SAML

• Security policies (for example, enforcing two-factor authentication)

In most cases, you’ll need Atlassian Guard Standard to use these features. There are some exceptions – our custom integrations, such as Google Workspace and Azure AD for nested groups, provide some user provisioning and single sign-on capabilities without Atlassian Guard Standard.

To check whether you should use Atlassian Guard Standard, see the following page.

Check whether you need Atlassian Guard and a cloud IdP

Before you begin

Check the following information before you start:

Estimate subscription cost and check if you need a non-billable policy

Atlassian Guard Standard uses a different billing model from other Atlassian cloud products. Atlassian Guard Standard is billed per organization. This means you only pay once for each managed account in your organization.

Check the number of users

We recommend that you check how many user accounts already exist in your cloud organization, then assess how many will be migrated so you can estimate the cost of your subscription.

Non-billable policy

If you have users that shouldn’t be included in your Atlassian Guard Standard bill, you can add them to a non-billable authentication policy. These users won’t be covered by the security requirements defined in your authentication policies, such as enforcing two-step verification.

Learn more about authentication policies

New users who can create accounts for themselves

If you don’t want new users who are manually invited, or sign themselves up, to count towards your Atlassian Guard Standard subscription, you can choose to make the default policy non-billable.

Learn how to configure a nonbillable default policy

Verify your domains and claim managed accounts

To unlock Atlassian Guard Standard features for your users, you’ll need to verify your domains and claim user accounts for the domain. Unless you decided to use our custom integrations, Google Workspace and Azure AD for nested groups, which will verify your domains during the sync, see the following page.

Learn how to verify domains and claim managed accounts

Get Atlassian Guard for your organization

You can use a 30-day trial for Atlassian Guard Standard. If you need more time, you can also contact our Support team who can extend this trial.

Learn how to get started with Atlassian Guard

Next steps

When you’re ready, configure your identity provider. Learn how to configure identity providers for the migration