Set up G Suite

We’re currently rolling out changes that affect the content on this page. From your organization at admin.atlassian.com, if the Users list and Groups list are under the Directory tab, you have the improved user management experience. We’ll note changes for the improved experience in the content below.

When you’ve connected to G Suite, any updates you make to user accounts in G Suite will sync to those accounts in your organization’s site(s), overwriting any changes made to the Atlassian account.

Because we automatically verify the domains of your G Suite account, you’ll be able to manage account details for users on your domains that don’t sync from G Suite. These users will receive an email informing them that their account is now managed. Learn more about managed accounts and domain verification.

Manage your users at the organization level

You’ll need to be an organization admin to access organization-level tasks like:

• provisioning user groups

• syncing all users to a new group or sync specific groups to your organization

• enabling and disabling automatic syncing

Sync settings for G Suite

Before you sync your G Suite, you’ll need to set up your sync settings. These settings will appear on the Setup page.

We offer a subscription to Atlassian Access with all the G Suite settings to better manage users and security. We also offer a free version of G Suite with fewer settings.

Here’s a breakdown of the different settings:

User syncing

The G Suite syncing process is a one-way sync. Any changes you make to G Suite will be reflected in Atlassian. Organization admins grant product access to a synced group or groups.

To choose how to sync:

1. Go to admin.atlassian.com. Select your organization if you have more than one.

2. Select Directory > G Suite.
   This step is different if you have the improved user management experience. Select Settings > G Suite.

3. Select Sync all
   
   To sync all existing and future users to a new group of G Suite users. Here’s an example of syncing all groups from your G Suite to your organization.

3. Select Sync specific groups with their users

To sync specific groups with their users, you’ll need a subscription to Atlassian Access.

Syncing specific groups with their users is a more convenient form of managing users since you can assign users to a specific group. Here’s an example of syncing specific groups from your G Suite to your organization.

Update product access for users

After a sync is complete, you need to give product access to new users.

To grant product access for new users:

1. Go to admin.atlassian.com. Select your organization if you have more than one.

2. Select Product access in the left nav.
   This step is different if you have the improved user management experience. Select Products, then for the product you want to grant access to, select Manage Access.

3. Add groups that have new users to products.

Enable and disable sync

You can enable and disable the syncing process at any time.

When you enable sync, your users sync from G Suite every 4 hours. When you disable sync, previously synced users maintain product access and your Google authentication setting still applies

Send email invites with a personal message

When we create Atlassian accounts for new users during a sync, we automatically email them Atlassian account, product access, and login details. You can choose to add a personal message to the email with special instructions.

Deactivate accounts

To automatically deactivate accounts, you’ll need a subscription to Atlassian Access.

When you suspend, archive, or delete accounts in your G Suite, we automatically deactivate those accounts in your organization.

User login

To require users to log in with Google, you’ll need a subscription to Atlassian Access.

G Suite authentication policies apply when users log in to your Atlassian products with Google. By default, both synced and unsynced users from G Suite choose whether to log in with Google or their Atlassian account.

If you opt for requiring users to log in with Google, we’ll share this in the email invite that we send to users with other account information.

Use G Suite single sign-on with authentication policies

You can configure your security settings in authentication policies. Authentication policies give you the flexibility to configure multiple security levels for different user sets within your organization. 

Authentication policies also reduce risk by giving you the ability to test different single sign-on configurations on a subset of users before rolling them out to your whole company. 

To enforce G Suite in an authentication policy:

1. If this is your first time setting up G Suite, navigate to G Suite setup.

2. If you’ve already set up G Suite, navigate to G Suite settings.

3. Select Enforce Google login for your users.

4. Select Edit policies and follow the prompts.

Learn more about editing authentication settings and members. 

Manage groups, users, and product access

You can manage your G Suite groups, users, and product access for your organization at any time.

To manage users and product access:

1. Go to admin.atlassian.com. Select your organization if you have more than one.

2. Select Product access in the left nav.
   This step is different if you have the improved user management experience. Select Products, then for the product you want to grant access to, select Manage Access.

To manage groups, go to your external G Suite to make group changes.

Resolve group conflicts before you sync

When you set up user provisioning, you may run into the situation where your groups in your Atlassian sites have the same names as groups in your identity provider (IDP).

When you sync, we’ll warn you about duplicate group names between your IDP and your Atlassian sites. You’ll then be able to accept or reject changes to group members before you sync those groups. Learn more about resolving group conflicts before you sync.