Provision and sync users from an identity provider
Make changes in your identity provider to users and groups and sync them to your Atlassian organization.
We’re currently rolling out changes that affect the content on this page. From your organization at admin.atlassian.com, if the Users list and Groups list are under the Directory tab, you have the improved user management experience. We’ll note changes for the improved experience in the content below. |
If you noticed a change in your organization admin settings, it’s because we migrated all G Suite connections to a new experience starting November 11, 2020.
You can edit any of the G Suite settings available to you after your first sync. Settings apply to G Suite users when they sync to your organization.
When you edit settings, you can:
Enable or disable a sync
Add or remove users
Add a personal message for new users
Choose user login requirements
When you save edits to your sync settings, they come into effect during the next scheduled sync. If you want your edited settings to take effect sooner, select Sync now.
To edit settings and sync right away:
Go to admin.atlassian.com. Select your organization if you have more than one.
Select Directory > G Suite.
This step is different if you have the improved user management experience. Select Settings > G Suite.
Click Edit settings and make your changes.
Click Save settings.
Click Sync now on the Status page.
Note this difference if you have the improved user management experience: any references to “organization’s site(s)” in this section are now “organization”.
When you create new users from G Suite, they'll sync to your organization's site(s). These new users will get access to products new users get by default, specified by the New users have access to this product toggle in the product access settings.
When you create new users from G Suite, we do not automatically give them access to products. To grant new users product access find them in and them to a product of your choice:
All users from G Suite group
Specific groups and users
For more details, see Update product access settings.
Note this difference if you have the improved user management experience: any references to “site” in this section are now “organization”.
You can still manage non-G Suite users from a site. For example, you might create non-G Suite accounts for external contractors or allow users to sign up to your products themselves. These users will be added as external users and won't be part of the sync (every 4 hours). They'll still count toward your product plan, just like G Suite users, and may increase your bill.
When you make updates to users' Google accounts from your G Suite, we'll sync those updates every 4 hours. Updates to your user password policy and password resets in G Suite will also sync. For more details, refer to the Google documentation.
If you sync users from specific groups, add new users to those groups. Otherwise, updates to those users won't sync.
To prevent a G Suite user from accessing your products, you have a few options:
If you're syncing all users, remove the user from any groups that give them product access.
If you're syncing users from specific groups, you can remove the user from the specific group you want to sync. When the next sync runs, the user will no longer have access to your products.
If you subscribe to Atlassian Access, you can remove a user from any G Suite group.
Was this helpful?