Enforcing Atlassian access by Product

[Phil Tayles]

Hi

Recently started using Access to enforce SSO.  I'd like to enforce SSO across certain Products, mainly JIRA Software, however, we have a lot of users who only use the free version of Trello,  I'm not concerned about enforcing SSO for them.  However, the only way I can see to do that is to manually assign users to authentication policies after looking at the products they use.  Is there any way to force Access for certain products?

Thanks

Phil

[Craig Castle-Mead]

Hi @Phil Tayles 

You are correct - there is no way to enforce SSO by product automatically. Access is about securing user accounts, not enforcing policies by product/instance.

Access now gives you the option to auto claim all accounts for a domain, or selectively, so you could move to selective claim and then only claim users you know are using Jira, however this means your users are “unsecure” by default, so I’d recommend auto-claiming all users for the domain and manually adding users you know are only using Trello to your non-billable/no-SSO policy. Users can obviously go from being Trello only to also using Jira, so this would need to be monitored on an ongoing basis to be accurate. The formal REST APIs for Access admin functions do not have feature parity with the UI either, so even scripting some of this (get all users and products, ensure appropriate users are in expected policies based on product access) is not a viable path. 

CCM