Uploaded image for project: 'Atlassian Guard'
  1. Atlassian Guard
  2. ACCESS-822

Support more synced attributes for SCIM User Provisioning

    • 575
    • Hide

      5th November
      Thank you all for your feedback and to those who answered our survey.

      We have added a Location attribute to SCIM User Provisioning. To add Location, you will need to sync to the following attribute: 

      • Full Attribute: urn:scim:schemas:extension:atlassian-custom:1.0:Attributes:basedIn
        • Namespace: urn:scim:schemas:extension:atlassian-custom:1.0:Attributes
        • Attribute Name: basedIn

      We are continuing to work on adding the following attributes and will provide dates for them shortly:

      • Profile picture
      • Employee ID

      We will also be enabling automations for approval workflows for the Manager attribute.

      We understand the importance of this feature, and we will update this ticket with more information on specific dates as we have them.

      Our support documentation will be updated as new attributes are added:

       

      Thanks,
      Holly

      Show
      5th November Thank you all for your feedback and to those who answered our survey. We have added a Location attribute to SCIM User Provisioning. To add Location, you will need to sync to the following attribute:  Full Attribute : urn:scim:schemas:extension:atlassian-custom:1.0:Attributes:basedIn Namespace : urn:scim:schemas:extension:atlassian-custom:1.0:Attributes Attribute Name : basedIn We are continuing to work on adding the following attributes and will provide dates for them shortly: Profile picture Employee ID We will also be enabling automations for approval workflows for the Manager attribute. We understand the importance of this feature, and we will update this ticket with more information on specific dates as we have them. Our support documentation will be updated as new attributes are added: https://support.atlassian.com/provisioning-users/docs/understand-user-provisioning/ https://support.atlassian.com/provisioning-users/docs/sync-user-attributes-to-your-organization/   Thanks, Holly
    • Our product teams collect and evaluate feedback from a number of different sources. To learn more about how we use customer feedback in the planning process, check out our new feature policy.

      As per the user-provisioning documentation the feature currently supports the sync of:

      • Display name
      • Email address
      • Organization
      • Job title
      • Timezone
      • Department
      • Preferred language

      From provisioning perspective, it would be a good feature to allow custom attributes from third party IDPs to be synced into the Atlassian accounts. Sample use cases:

      • Profile photos
      • Location/Office/Based in
      • Manager (JSD approvals automatically set to the user's Manager)
      • Employee ID
      • Student ID's
      • Cost center

          Form Name

            [ACCESS-822] Support more synced attributes for SCIM User Provisioning

            Pinned comments

            For those of you asking about UPN sync for Entra, that is also in progress, scheduled to launch by the end of 2024. You can track progress here: https://jira.atlassian.com/browse/ACCESS-1560

            We have heard your feedback related to the Manager attribute. When Manager becomes available, you will also be able to use it for automating approvals, which is why it will take a bit longer to release than the other attributes.

            We will make sure the product teams are aware of the additional attributes and your feedback related to attribute automation.

            Thank you for your feedback!

            Holly Makris (Inactive) added a comment - For those of you asking about UPN sync for Entra, that is also in progress, scheduled to launch by the end of 2024. You can track progress here: https://jira.atlassian.com/browse/ACCESS-1560 We have heard your feedback related to the Manager attribute. When Manager becomes available, you will also be able to use it for automating approvals, which is why it will take a bit longer to release than the other attributes. We will make sure the product teams are aware of the additional attributes and your feedback related to attribute automation. Thank you for your feedback!

            Thank your for your feedback on how to add the Location attribute. We have updated our documentation here: https://support.atlassian.com/provisioning-users/docs/sync-user-attributes-to-your-organization/

            Please do continue to post your questions and feedback, we are reviewing daily and will update the documentation to address any confusion.

            We will update this ticket with more information about the Employee ID and Profile picture attributes as well as Manager automations as soon as we have them. Please watch the Current Status section of this ticket for updates.

            Holly Makris (Inactive) added a comment - Thank your for your feedback on how to add the Location attribute. We have updated our documentation here: https://support.atlassian.com/provisioning-users/docs/sync-user-attributes-to-your-organization/ Please do continue to post your questions and feedback, we are reviewing daily and will update the documentation to address any confusion. We will update this ticket with more information about the Employee ID and Profile picture attributes as well as Manager automations as soon as we have them. Please watch the Current Status section of this ticket for updates.

            All comments

            Kim Walton added a comment - - edited

            Hopefully they include some details as to what specifically is going to be included in this progress.   There are so many attributes that have been added in the comments and every one of them would be useful to most, if not everyone.  

            Kim Walton added a comment - - edited Hopefully they include some details as to what specifically is going to be included in this progress.   There are so many attributes that have been added in the comments and every one of them would be useful to most, if not everyone.  

            Mourad Marzouk added a comment -

            Happy early "In Progress" status anniversary everyone!

            Mourad Marzouk added a comment - Happy early "In Progress" status anniversary everyone!

            BJW added a comment -

            It would be intergalactically great (others would say normal expectation..) if the DisplayName, which is mentioned here https://support.atlassian.com/provisioning-users/docs/understand-user-provisioning/#Supported-user-account-operations, can be adjusted to a different format than "FirstName LastName". 
            We are working with External Partners, so a Displayname "FirstName LastName (CompanyName)" would make life more easier.
            Synching a different value shows as successfull in the SCIM log, but does not change anything on side of Atlassian.

            "Dear Santa Atlassian - please make my wish come true. We also dutifully followed you from on-premise to the cloud."

            BJW added a comment - It would be intergalactically great (others would say normal expectation..) if the DisplayName, which is mentioned here https://support.atlassian.com/provisioning-users/docs/understand-user-provisioning/#Supported-user-account-operations, can be adjusted to a different format than "FirstName LastName".  We are working with External Partners, so a Displayname "FirstName LastName (CompanyName)" would make life more easier. Synching a different value shows as successfull in the SCIM log, but does not change anything on side of Atlassian. "Dear Santa Atlassian - please make my wish come true. We also dutifully followed you from on-premise to the cloud."

            Is there an assumption when the phone number will be available for sync or even automatically populated in Jira Operations)OpsGenie?

            Richard Scholtes added a comment - Is there an assumption when the phone number will be available for sync or even automatically populated in Jira Operations)OpsGenie?

            Do we have any idea when Employee ID will be available?

             

            Nick E Buono added a comment - Do we have any idea when Employee ID will be available?  

            Noah Souza added a comment -

            I would like to echo the calls below asking for how phone numbers can be synced in via SCIM. I see in Entra that I can select targets like phoneNumbers[type eq "work"].display and phoneNumbers[type eq "work"].value but there's no documentation I can find about what goes in display/value. Thanks for your guidance on this!

            Noah Souza added a comment - I would like to echo the calls below asking for how phone numbers can be synced in via SCIM. I see in Entra that I can select targets like phoneNumbers [type eq "work"] .display and phoneNumbers [type eq "work"] .value but there's no documentation I can find about what goes in display/value. Thanks for your guidance on this!

            s.weber added a comment -

            Hi f3e720d2056e , we can only Agree with 370a12e49480. Entra is already storing the images, why cant we just refer to these? It has to be possible via API as other Applications rely on this as well.

            s.weber added a comment - Hi f3e720d2056e , we can only Agree with 370a12e49480 . Entra is already storing the images, why cant we just refer to these? It has to be possible via API as other Applications rely on this as well.

            Hi f3e720d2056e , fully agree regarding the photo link. Additionally, I want to comment that I don't get why you should add a photo attribute at all as there is some possibility to add photos / avatars by default in Entra?

            Did you find any way to get this working?

            Matthias Fleschütz added a comment - Hi f3e720d2056e , fully agree regarding the photo link. Additionally, I want to comment that I don't get why you should add a photo attribute at all as there is some possibility to add photos / avatars by default in Entra? Did you find any way to get this working?

            Noah Souza added a comment - - edited

             

            [Sync user profile photos to your organization | Atlassian Support|https://support.atlassian.com/provisioning-users/docs/sync-user-profile-photos-to-your-organization/] 

            Editing this comment as the documentation I linked to seems to be totally incomplete. There's no information about what should go in the "Primary Photo Value" attribute that's created or how the data contained within it should be synced with the Entra user profile photo. Nor do the sections "To update attribute name and value:" or "To host the photo:" have enough information or context to be helpful. 

            Noah Souza added a comment - - edited   [Sync user profile photos to your organization | Atlassian Support|https://support.atlassian.com/provisioning-users/docs/sync-user-profile-photos-to-your-organization/]   Editing this comment as the documentation I linked to seems to be totally incomplete. There's no information about what should go in the "Primary Photo Value" attribute that's created or how the data contained within it should be synced with the Entra user profile photo. Nor do the sections "To update attribute name and value:" or "To host the photo:" have enough information or context to be helpful. 

            Hi there!

            Is there any ETA when user photo attribute will be available for mapping?

            Thanks in the advance.

            Adrian Dubiel added a comment - Hi there! Is there any ETA when user photo attribute will be available for mapping? Thanks in the advance.

              e902c0832f88 Sudesh Peram
              rmacalinao Ramon M
              Votes:
              1075 Vote for this issue
              Watchers:
              640 Start watching this issue

                Created:
                Updated: