Differences

This shows you the differences between two versions of the page.

--- wiki:connect_microsoft_azure_active_directory_atlassian_cloud [2021/07/28 10:32] – add Troubleshooting antisa
+++ wiki:connect_microsoft_azure_active_directory_atlassian_cloud [2021/07/29 16:43] (current) – add steps and more links antisa
@@ Line 3: / Line 3: @@
 ====== Connect Microsoft Azure Active directory with Atlassian Cloud ======
   - Get Atlassian access trial
-  - verify domain > claim accounts
+  - Verify domain > Claim accounts
   - User provisioning > Create a directory
   - Login to Azure, create new directory, add test users
+  - Add custom domain name and verify to AD
   - Follow https://docs.microsoft.com/en-us/azure/active-directory/saas-apps/atlassian-cloud-provisioning-tutorial
   - Assign user/groups to the Atlassian Cloud app in Azure: Home > youraccount > Enterprise applications | All applications > Atlassian Cloud | Users and groups
-  - Add custom domain name and verify to AD
+  - Alternative to assigning users and groups is to select "Sync all users and groups" in Provision settings and then [[https://docs.microsoft.com/en-us/azure/active-directory/app-provisioning/define-conditional-rules-for-provisioning-user-accounts#create-scoping-filters|limit the synced users via scoping]] in Attribute mappings
+  - Change attribute mapping for AD ''mail'' object which maps to Atlassian ''emails[type eq "work"].value'' to ''userPrincipalName'' - {{ :wiki:screenshots:azure_attribute_mapping.png?linkonly|example}}
   - Enable SAML SSO login
 https://docs.microsoft.com/en-us/azure/active-directory/saas-apps/atlassian-cloud-tutorial
@@ Line 28: / Line 30: @@
   * https://community.atlassian.com/t5/Atlassian-Access-questions/Atlassian-managed-accounts-and-Azure-AD/qaq-p/1046548
   * https://confluence.atlassian.com/cloud/saml-single-sign-on-943953302.html
+  * https://community.atlassian.com/t5/Jira-questions/Azure-user-provisioning/qaq-p/1174384