Do i need atlassian guard if i want my users to log into cloud jira through my company ADFS?

[Adam Břínek]

Right now we are thinking about Jira cloud and i am a little confused about whole LDAP sync and login.

If i have only a jira cloud am i am able only to sync users from my Active directory?
If i want a SSO i need to purchase Atlassian guard? Is this correct?

[Chitra Nagdeo]

Hi @Adam Břínek ,

Welcome to Atlassian Community Forum!

Yes, Atlassian Guard is required for SSO in Jira Cloud.

• SSO (including SAML SSO) for Jira Cloud is only available if you purchase an Atlassian Guard subscription (or have a Cloud Enterprise plan, which includes Guard Standard).

• Atlassian Guard lets you connect your identity provider (like Azure AD, Okta, etc.) for SSO and user provisioning.

• Without Atlassian Guard, users log in with Atlassian accounts and cannot use enterprise SSO

Direct LDAP/AD sync is not natively supported in Jira Cloud alone.

• Jira Cloud does not support direct LDAP or Active Directory sync like Jira Server/Data Center.

• To sync users from your on-premises Active Directory (or other IdPs), you need to use Atlassian Guard (formerly Atlassian Access) and configure user provisioning (SCIM) via your IdP (such as Azure AD, Okta, etc.)

I hope this helps answer your query, have a good day!

Regards

Chitra Nagdeo

[Adam Břínek]

Thanks for the simple answer. 

But to be honest if even the user sync is impossible without paying for Atlassian Guard it feels like milking companies for more money. 

[Chitra Nagdeo]

I certainly understand, you may discuss with Atlassian Guard team to help you further if any workaround was feasible. Navigate to support portal and select Atlassian Guard.