Single sign on

[Amit Sharma]

Do we have to setup single sign on again after product transfer?

[carlosughini · Accepted solution]

Hi Amit,

Welcome to the community!

The SSO is configured for the Atlassian Organization so if you transfer the product for the Organization that already have the SSO configured you do not need to setup a new SSO.

You can check more information about it in the following below:

• Single Sign On 

Please let me know if it helps.

Best regards,

Carlos

[Amit Sharma]

Thanks carlos,

But what if current organization have google authentication and I want to change it to azure authentication after product transfer, is it possible to do?

[carlosughini]

Hi Amit,

You would need to change the authentication method for the entire organization.

Unfortunately, support for multiple IDPs is work in progress, think it makes sense to watch https://www.atlassian.com/roadmap/cloud?&search=sso and https://jira.atlassian.com/browse/ACCESS-572.

Does this answer your question?

Kind regards,

Carlos

[Amit Sharma]

Hi Carlos,

Will we be able to rollback to source organization if we are not able to implement azure AD authentication after the product transfer?

Is there any chances of migration failure during product transfer?

How can admin user access the source organization for verification after completion of product transfer?

[Ed Letifov _TechTime - New Zealand_]

Hello, @Amit Sharma 

SSO authentication in Atlassian Access is not to the product but to the whole Atlassian Cloud. 

As such what you should do is create a test site in the target organisation, configure your SSO, test that you can access this test site i.e. prove that your Azure AD SSO works.

Then transfer.

This way your need for a rollback is significantly reduced.

Access to the products is defined by Product Access in the site – this is where you may need to replace or add Azure AD groups (if you have groups being pushed by User Provisioning from Azure AD)

As I said in my answer on your other question – there is very low risk in transfer itself. 

You have to be admin in both orgs to enact the transfer. You will be able to access the target right away.

[Amit Sharma]

Hello @Ed Letifov _TechTime - New Zealand_ ,

Thanks for your great response,

Can you provide me demo on Azure AD configuration?

Also a demo on step by step for product transfer

[Ed Letifov _TechTime - New Zealand_]

@Amit Sharma 

Unless you are in New Zealand, where I represent TechTime, a Platinum Solution Partner, currently the only one with Cloud Specialization – the "demo" request should be directed to a Solution Partner near you https://partnerdirectory.atlassian.com/

Atlassian support most likely will refer you to these official Atlassian's tutorials published to Azure AD documentation site:

• https://docs.microsoft.com/en-us/azure/active-directory/saas-apps/atlassian-cloud-tutorial mentioned in official Atlassian documentation https://support.atlassian.com/security-and-access-policies/docs/configure-saml-single-sign-on-with-an-identity-provider/
• https://docs.microsoft.com/en-us/azure/active-directory/saas-apps/atlassian-cloud-provisioning-tutorial mentioned in official Atlassian documentation https://support.atlassian.com/provisioning-users/docs/understand-user-provisioning/

I suggest you also read answers I've provided here to understand how to configure SSO, and User Provisioning *correctly*, as well as touching on the point of groups and product access based on groups coming from Azure AD

• https://community.atlassian.com/t5/Atlassian-Access-questions/Integrate-Azure-AD-with-Atlassian-Cloud/qaq-p/1852575
• https://community.atlassian.com/t5/Jira-Service-Management/Azure-AD-login-and-incoming-email-not-matching-up/qaq-p/1821809
• https://community.atlassian.com/t5/Confluence-questions/What-is-the-difference-between-site-access-and-product-access/qaq-p/1306257