Provision and sync users from an identity provider
Make changes in your identity provider to users and groups and sync them to your Atlassian organization.
You can connect an identity provider and configure single sign-on for your portal-only customers (Jira Service Management) when you subscribe to Atlassian Guard. Read more about connecting an identity provider to customers.
Some Atlassian Guard Standard (formerly known as Atlassian Access) features, such as user provisioning and single sign-on, require a third-party identity provider. You can use the identity provider of your choice, but some capabilities are only available with selected identity providers. Learn how to connect an identity provider
The following identity providers are supported for SCIM user provisioning:
Auth0
CyberArk Idaptive (formerly Centrify)
Google Workspace
JumpCloud
Microsoft Azure Active Directory (AD)
Okta
OneLogin
Ping Identity
If you don’t want to use a supported identity provider, you can also use the user provisioning API to create your own integration to manage users and groups. Learn about the user provisioning REST API
User provisioning is available for most products, but syncing group memberships is only available for Jira product instances and Confluence.
You can provision managed accounts and external users from your identity provider through SCIM.
The following identity providers are supported for SAML single sign-on:
Active Directory Federated Services (AD FS)
Auth0
CyberArk Idaptive (formerly Centrify)
Google Workspace
JumpCloud
Microsoft Azure Active Directory (AD)
Okta
OneLogin
Ping Identity
You can apply SAML single sign-on for managed accounts and external users from your identity provider.
How to authorize single sign-on
If you don’t want to use a supported identity provider, you can use any other identity provider as long as it implements SAML 2.0. We only provide guidance for supported identity providers.
You can’t use OpenID Connect for single sign-on.
An Atlassian Guard Standard subscription allows you to connect one identity provider.
An Enterprise plan allows you to connect multiple identity providers. Atlassian Guard Standard is included with your Enterprise plan at no extra cost.
If you're migrating from Data Center, you may need to handle nested groups. This could affect your choice of identity provider. Learn about preparing nested groups for a Cloud migration
Was this helpful?