Prepare for and set up Atlassian Guard
Atlassian Guard Standard (formerly known as Atlassian Access) is an organization-wide subscription that gives you additional features for managing your users, including:
User provisioning using SCIM
Single sign-on using SAML
Security policies (for example, enforcing two-factor authentication)
In most cases, you’ll need Atlassian Guard Standard to use these features. There are some exceptions – our custom integrations, such as Google Workspace and Azure AD for nested groups, provide some user provisioning and single sign-on capabilities without Atlassian Guard Standard.
To check whether you should use Atlassian Guard Standard, see the following page.
Check whether you need Atlassian Guard and a cloud IdP
Before you begin
Check the following information before you start:
Estimate subscription cost and check if you need a non-billable policy
Atlassian Guard Standard uses a different billing model from other Atlassian cloud products. Atlassian Guard Standard is billed per organization. This means you only pay once for each managed account in your organization.
Check the number of users
We recommend that you check how many user accounts already exist in your cloud organization, then assess how many will be migrated so you can estimate the cost of your subscription.
Non-billable policy
If you have users that shouldn’t be included in your Atlassian Guard Standard bill, you can add them to a non-billable authentication policy. These users won’t be covered by the security requirements defined in your authentication policies, such as enforcing two-step verification.
Learn more about authentication policies
New users who can create accounts for themselves
If you don’t want new users who are manually invited, or sign themselves up, to count towards your Atlassian Guard Standard subscription, you can choose to make the default policy non-billable.
Learn how to configure a nonbillable default policy
Verify your domains and claim managed accounts
To unlock Atlassian Guard Standard features for your users, you’ll need to verify your domains and claim user accounts for the domain. Unless you decided to use our custom integrations, Google Workspace and Azure AD for nested groups, which will verify your domains during the sync, see the following page.
Learn how to verify domains and claim managed accounts
Get Atlassian Guard for your organization
You can use a 30-day trial for Atlassian Guard Standard. If you need more time, you can also contact our Support team who can extend this trial.
Learn how to get started with Atlassian Guard
Next steps
When you’re ready, configure your identity provider. Learn how to configure identity providers for the migration
Was this helpful?