Is it possible for Jira Software to have SSO with Okta for both verified and unverified domain users

[Robert Johnson]

we configured SSO via okta for our jira cloud instance and have a verified domain for our employees.  However, our Okta instance has contractors who use a few different domains.  The contractors do sync to Jira  with the various domains but are not showing up in managed accounts and therefore we cannot figure out a way to require them to use our SSO (Okta).  Is that a limitation or are we missing a setting somewhere. 

We need to require all our Jira users to us SSO regardless of verified domain or not.  As long as they are sync via our Okta, they should be required to use SSO.

For now we disabled SSO until we figure this out.

[Walter Buggenhout · Accepted solution]

Hi @Robert Johnson and welcome to the Community!

Currently this is not possible (yet) as setting up SSO (via Atlassian Access) requires you to claim the domain first, which is - obviously - something you cannot do for domains your organisation does not own.

However, this is an area Atlassian is working to improve. An initiative to enforce security policies for users from unverified domains is currently part of an ongoing EAP (see feature request ACCESS-102), which should later on provide the necessary prerequisites to also work on SSO for those same, external users (you can track that feature request here: ACCESS-1362)

Hope this helps!

[Robert Johnson]

thank you for the transparency!  We definitely need this feature and cannot go live with SAML\SSO without it.  Will monitor the board for that.

[Ananjan_miniOrange]

Hi @Robert Johnson 

I am ananjan from miniOrange.

We have a solution, SSO Integration with Helpdesks, which can cater to your requirements by utilizing your customer portal. 

Just check it out once and feel free to let us know if this works for you!

You can raise a ticket here or contact us directly at atlassiansupport@xecurify.com for more information. 

Best Regards,

Ananjan Mishra.