What happens to current tickets when I set up SAML-SSO?

[Austin Smith]

I need to know what will happen, if anything, to all of my users current tickets that they have in Jira. We use this as our ticketing/workflow and I cant afford for all of my users to start fresh when converting to SSO. Will these tickets "merge" or how does it work? 

[Jon Espen Ingvaldsen Kantega SSO]

Hi @Austin Smith 

This goes fine as long as your usernames remains the same.

Are you on server, datacenter or cloud and which SAML Idp do you want to integrate with? 
Some SAML SSO add-ons in Atlassian Marketplace (including our Kantega SSO add-on) allow you to also transform Idp usernames with regex, such that they match and map to original usernames.

Regards,
Jon Espen
Kantega SSO

[Austin Smith]

I will need to integrate with Azure Cloud. Is it possible to sync with onPrem AD server? if so which is recommended? looking for the easiest implementation while still allowing SSO. My onPrem is connected via AD connect to my Azure AD.

Is there information readily available on how to create/use the regex? I dont have any experience with it. 

[Jon Espen Ingvaldsen Kantega SSO]

If you use Jira cloud, I would recommend you to make use of Atlassian Access. This service allow you to setup SAML SSO and cloud user provisioning towards Azure AD.

On the Jira onPrem variants (server and data center) there are several ways for setting up SSO and user provisioning.

• On-prem AD can be setup as a synchronized user directory.
• Atlassian Crowd is one alternative gives you SSO across Atlassian products and I believe latest versions of Crowd also support SAML. 
• Utilize one of the SSO add-ons available on Atlassian Marketplace. Kantega SSO and Re:Solution have the two most popular Jira SSO add-ons. These two also support cloud user provisioning, allowing you to setup Azure AD as a synchronized user directory. They also allow you to transform usernames (i.e strip of @domain-information or, more advanced, to apply regex).
  
  

What type of transformations do you need to do to make your Azure usernames match existing Jira users? Do you have some examples of usernames you would like to transform?

Cheers,
-Jon Espen

[Austin Smith]

Yes, I use Jira cloud, sorry. Jira cloud > Azure. 
I may not even need to do any transformations, I think most of my users have been created using their email accounts. I'm new to Jira so I apologize. 

all of my users already use their email address to sign in. So would this be a seamless process? So if I understand this correctly: just follow the steps to setup the SSO, the accounts sync after performing the required steps, and all tickets remain in tact, is this correct? 

[Austin Smith]

sorry for that spotty message there I didn't proof read but I feel my main points were made lol. 

[Jon Espen Ingvaldsen Kantega SSO]

I am not an expert on Jira cloud, but I would recommend you to follow the Azure AD guides for Atlassian Access to setup both SAML SSO. You should also decide wether to keep your user directory management as is or apply the cloud user provisioning.

Good luck with the setup :)

-Jon Espen