All users in the Atlassian Cloud App in Okta have the same tiles available to them regardless as to what products they can actually access. It would be helpful to be able to manage which tiles display to the user at the user or group level.

Workaround

Okta has a Bookmark App that can be assigned to certain users or groups. These steps will allow for IdP-initiated logins using the bookmark app to Confluence and Jira:

1. Go to your Okta admin portal and find your Atlassian cloud app
2. Under the General tab, click on Edit under the App settings section, and mark "Do not display application icon to users"
3. Save the configuration
4. Scroll down until you see App Embed Link, and make sure to take note of Jira SAML's URL and Confluence SAML's URL (or any other app they need to have conditionally shown)
5. Configure your Bookmark app and adjust the URL and Icon accordingly
6. Assign a specific group of users to each Bookmark app