Uploaded image for project: 'Identity'
  1. Identity
  2. ID-6305

Provide SCIM API's for managing Atlassian account users

XMLWordPrintable

    • Icon: Suggestion Suggestion
    • Resolution: Done
    • None
    • None

    • Our product teams collect and evaluate feedback from a number of different sources. To learn more about how we use customer feedback in the planning process, check out our new feature policy.

      Atlassian status as of 7 March 2019

      Hi everyone,

      The Atlassian Cloud app in Azure AD now supports automated user and group provisioning. If you have Azure AD as your identity provider, you can configure the app to automate the provisioning and deprovisioning process. To get it setup, have a read about how automatic user provisioning works with Atlassian Cloud and then follow the instructions on Azure AD.

      As a quick summary:

      Regards,
      The Atlassian Access team

       

      Original request:

      User management REST API in JIRA Cloud do not support user profile updates, this breaks consumer who relay on these API's to update user profiles. 

      Fix: Expose public API's (SCIM standard) for user management which allows consumers to provision, update, delete users directly with Atlasssian account

            [ID-6305] Provide SCIM API's for managing Atlassian account users

            Helena made changes -
            Remote Link New: This issue links to "Page (Confluence)" [ 564568 ]
            Helena made changes -
            Remote Link New: This issue links to "Page (Confluence)" [ 564567 ]
            Helena made changes -
            Remote Link New: This issue links to "Page (Confluence)" [ 564627 ]
            Katherine Yabut made changes -
            Workflow Original: JAC Suggestion Workflow [ 3258730 ] New: JAC Suggestion Workflow 3 [ 3644855 ]
            Status Original: RESOLVED [ 5 ] New: Closed [ 6 ]
            Suba V (Inactive) made changes -
            Link New: This issue supersedes CLOUD-10147 [ CLOUD-10147 ]

            Stephen Mahood added a comment -

            Yes, we did get it sorted. Our Atlassian Cloud app registration within AzureAD was created a long time ago so it didn't have the correct appRoles for the provisioning to work. Our app only had the msiam_access role available, and not the "User" role. The User role is what is filtered on for the provisioning to work. We ended up patching our application registration using the graph api to include an additional appRole called User which then allowed the provisioning to start working once the User role was assigned to the users. 

            Stephen Mahood added a comment - Yes, we did get it sorted. Our Atlassian Cloud app registration within AzureAD was created a long time ago so it didn't have the correct appRoles for the provisioning to work. Our app only had the msiam_access role available, and not the "User" role. The User role is what is filtered on for the provisioning to work. We ended up patching our application registration using the graph api to include an additional appRole called User which then allowed the provisioning to start working once the User role was assigned to the users. 

            Sean Bryceland added a comment - - edited

            @s.mahood did you get a response from Jira or Microsoft on the NotEffectivelyEntitled error. We have the same issue 

            Sean Bryceland added a comment - - edited @s.mahood did you get a response from Jira or Microsoft on the NotEffectivelyEntitled error. We have the same issue 
            Michael Andreacchio made changes -
            Workflow Original: ACCESS Suggestion workflow [ 3157070 ] New: JAC Suggestion Workflow [ 3258730 ]

            Yevgen Lasman added a comment -

            akilunov there is SCIM add-on available on Marketplace for Jira Server. Not sure it is Data Center compatible though but certainly works for Server.

            Yevgen Lasman added a comment - akilunov there is SCIM add-on available on Marketplace for Jira Server. Not sure it is Data Center compatible though but certainly works for Server.
            Katherine Yabut made changes -
            Workflow Original: reviewflow [ 2011280 ] New: ACCESS Suggestion workflow [ 3157070 ]

              vsankin vlad (Inactive)
              asridhara Adarsh
              Votes:
              167 Vote for this issue
              Watchers:
              160 Start watching this issue

                Created:
                Updated:
                Resolved: