Provision and sync users from an identity provider
Make changes in your identity provider to users and groups and sync them to your Atlassian organization.
Which user management experience do you have?
To check, go to your organization at admin.atlassian.com and select Directory. If the Users and Groups lists are found here, then you are using the centralized user management. Learn more about the centralized user management
We’ll note these changes in the support documentation below.
Original | Centralized |
As a site administrator or organization admin, Users is found under Product site. | As an organization admin, Users is found under Directory tab. |
You can now find Google Workspace in the same place you manage any identity provider. To find it, go to under Security > Identity providers. Learn more about identity providers
You can edit any of the Google Workspace settings available to you after your first sync. Settings apply to Google Workspace users when they sync to your organization.
When you edit settings, you can:
Enable or disable a sync
Add or remove users
Add a personal message for new users
Choose user login requirements
When you save edits to your sync settings, they come into effect during the next scheduled sync. If you want your edited settings to take effect sooner, select Sync now.
To edit settings and sync right away:
Go to admin.atlassian.com. Select your organization if you have more than one.
This step is different depending on your user management experience:
- Original: Select Security > Identity Provider.
- Centralized: Select Settings > Google Workspace.
Select Directory name.
Edit settings and make your changes.
Select Save settings.
Select Sync now on the Status page.
Note this difference if you have the improved user management experience: any references to “organization’s site(s)” in this section are now “organization”.
When you create new users from Google Workspace, they'll sync to your organization's site(s). These new users will get access to products new users get by default, specified by the New users have access to this product toggle in the product access settings.
When you create new users from Google Workspace, we do not automatically give them access to products. To grant new users product access find them in and them to a product of your choice:
All users from Google Workspace group
Specific groups and users
For more details, see Give users access to products.
Note this difference if you have the improved user management experience: any references to “site” in this section are now “organization”.
You can still manage non-Google Workspace users from a site. For example, you might create non-Google Workspace accounts for external contractors or allow users to sign up to your products themselves. These users will be added as external users and won't be part of the sync (every 4 hours). They'll still count toward your product plan, just like Google Workspace users, and may increase your bill.
When you make updates to users' Google accounts from your Google Workspace, we'll sync those updates every 4 hours. Updates to your user password policy and password resets in Google Workspace will also sync. For more details, refer to the Google documentation.
If you sync users from specific groups, add new users to those groups. Otherwise, updates to those users won't sync.
To prevent a Google Workspace user from accessing your products, you have a few options:
If you're syncing all users, remove the user from any groups that give them product access.
If you're syncing users from specific groups, you can remove the user from the specific group you want to sync. When the next sync runs, the user will no longer have access to your products.
If you subscribe to Atlassian Guard Standard, you can remove a user from any Google Workspace group.
Was this helpful?