How to ID which accounts are Atlassian IDs?

[chris sieverts]

As a org admin, is there a way to see which user accounts/IDs in our domain are Atlassian IDs? I have looked in the directory and at profiles an don't see anything that jumps out, is it staring me in the face or is it somewhere else? I also exported the users and don't see anything in the userid field either.

FYI, we haven't yet migrated all of our user base from DC into the cloud, only our Opsgenie team. In addition to the OG users, I see a few dozen more listed in the directory and then many more users to claim when we move to managing their accounts but I see nothing distinguishing the OG users who are now Atlassian IDs.

Thank you!

[John Price · Accepted solution]

Hi Chris - 

Pretty sure every user in a Cloud instance/org has an Atlassian ID. Are you thinking of managed vs. unmanaged accounts? If so, Directory -> Managed Accounts will show you those managed by the org and Directory -> Users shows everyone. Can you give more context?

[chris sieverts]

Hi John, I'm a relative newbie to the cloud and it is my understanding that not all users in our domain have Atlassian IDs. We have not invited our user base, hooked up our ID provider, nor begun to claim our accounts to manage them. The number of accounts I already see in the cloud is ~1/4 of our users (all of whom in the user export have a User ID) and I see 3 times that number of people in the potential accounts to claim. Is it the case, as it sounds in your statement, that any ID's that are in the cloud already, are those with an Atlassian ID and everyone else (that 3x group to claim) does not?

[John Price]

Hm ... so you haven't invited your user base or set up SSO? But I'm guessing you must have claimed yourcompany.com as a domain in your Cloud Org, right?

If that's the case, you might just be seeing people who already have been using Atlassian Cloud products somewhere using their company email. Atlassian IDs are global to the world, not just your org. So for example when I first claimed mycompany.com as a domain and looked in Directory, I saw stuff like:

• A bunch of people who had signed up for free Trello accounts using their work email
• People on teams who were running their own small or test Jira Cloud sites
• People using their work email to log into other companies' Atlassian Cloud sites (including Atlassian's btw).

Have a look at one of the users who does show up and see what you can tell about their products. Maybe also contact a few.

[chris sieverts]

Yes we claimed our domain.

And I believe you are correct! I went ahead and exported the list of users that Atlassian said we could claim and have found that:

• There's a column for "Atlassian ID"! (which I now see is the "User ID" field from the cloud user export list, same value but different naming) 
• All of those in that export are part of our current cloud plus scenarios like you saw where they signed up for Trello, etc.

And now comparing that list of accounts to claim with our current DC user base I see that Atlassian is not aware of many others, which now makes sense to me!

Thank you for your help!

[John Price]

Great! Now you have a new problem ... a bunch of "shadow IT" free Trello accounts you need to figure out how to deal with :-) Who knows who is sharing what company data with whom on there ... if you tell your InfoSec team they'll have a heart attack!