External users

[rtamam]

Hi

What is Atlassian best practice for external users?

In my organization, there're several projects that required 3rd party involvement.

Should I apply any policy on those users?

Thanks

Rom.

[John Funk]

Hi @rtamam 

I don't know that there is a best practice for this. It really depends on how your organization prefers to handle things. For instance, at a previous organization, it was required that all external users to Jira (i.e. Contractors) had to have an email address at our organization's domain and use that email to log in. (It wasn't just for Jira - it applied to all software used by the contractors). 

Other clients I have worked with will use their IAM/SSO tool to verify their internal users with email addresses at their company domain. But then simply do an invite of external users using the email address that the contractor provides. 

Either way should work depending on your org's requirements. 

[rtamam]

Thanks for the response.

As for now, I'm managing my internal users with Azure SSO SAML provision.

But, Org Admin can invite external users,

Is it possible to block the invitation from the Atlassian? and enforce only IDP users to be synced?

[John Funk]

Take a look at this and see if it helps you. 

https://jira.atlassian.com/browse/ID-7692