Uploaded image for project: 'Identity'
  1. Identity
  2. ID-6305

Provide SCIM API's for managing Atlassian account users

    • Icon: Suggestion Suggestion
    • Resolution: Done
    • None
    • None
    • Our product teams collect and evaluate feedback from a number of different sources. To learn more about how we use customer feedback in the planning process, check out our new feature policy.

      Atlassian status as of 7 March 2019

      Hi everyone,

      The Atlassian Cloud app in Azure AD now supports automated user and group provisioning. If you have Azure AD as your identity provider, you can configure the app to automate the provisioning and deprovisioning process. To get it setup, have a read about how automatic user provisioning works with Atlassian Cloud and then follow the instructions on Azure AD.

      As a quick summary:

      Regards,
      The Atlassian Access team

       


      Original request:

      User management REST API in JIRA Cloud do not support user profile updates, this breaks consumer who relay on these API's to update user profiles. 

      Fix: Expose public API's (SCIM standard) for user management which allows consumers to provision, update, delete users directly with Atlasssian account

            [ID-6305] Provide SCIM API's for managing Atlassian account users

            Helena made changes -
            Remote Link New: This issue links to "Page (Confluence)" [ 564568 ]
            Helena made changes -
            Remote Link New: This issue links to "Page (Confluence)" [ 564567 ]
            Helena made changes -
            Remote Link New: This issue links to "Page (Confluence)" [ 564627 ]
            Katherine Yabut made changes -
            Workflow Original: JAC Suggestion Workflow [ 3258730 ] New: JAC Suggestion Workflow 3 [ 3644855 ]
            Status Original: RESOLVED [ 5 ] New: Closed [ 6 ]
            Suba V (Inactive) made changes -
            Link New: This issue supersedes CLOUD-10147 [ CLOUD-10147 ]
            Michael Andreacchio made changes -
            Workflow Original: ACCESS Suggestion workflow [ 3157070 ] New: JAC Suggestion Workflow [ 3258730 ]
            Katherine Yabut made changes -
            Workflow Original: reviewflow [ 2011280 ] New: ACCESS Suggestion workflow [ 3157070 ]
            Adarsh made changes -
            Resolution New: Done [ 17 ]
            Status Original: Implemented [ 10025 ] New: Resolved [ 5 ]
            lingbo (Inactive) made changes -
            Link New: This issue is related to ACCESS-632 [ ACCESS-632 ]
            lingbo (Inactive) made changes -
            Description Original: {panel:title=Atlassian status as of 7 March 2019|borderStyle=solid|borderColor=#3c78b5|titleBGColor=#4c9aff|bgColor=#deebff}
            Hi everyone,

            The Atlassian Cloud app in *Azure AD* now supports automated user and group provisioning. If you have Azure AD as your identity provider, you can configure the app to automate the provisioning and deprovisioning process. To get it setup, have a read about [how automatic user provisioning works with Atlassian Cloud|https://confluence.atlassian.com/cloud/user-provisioning-959305316.html] and then follow the instructions on [Azure AD|https://docs.microsoft.com/en-us/azure/active-directory/saas-apps/atlassian-cloud-provisioning-tutorial].

            As a quick summary:
             * We currently support [*Okta*|https://confluence.atlassian.com/cloud/configure-user-provisioning-with-okta-957492956.html], [*OneLogin*|https://onelogin.service-now.com/support?id=kb_article&sys_id=05501489db792708ca1c400e0b9619ea], and [*Azure AD*|https://docs.microsoft.com/en-us/azure/active-directory/saas-apps/atlassian-cloud-provisioning-tutorial].
             * For other identity providers, you can use the [User provisioning (SCIM) API (documentation at developer.atlassian.com)|https://developer.atlassian.com/cloud/admin/user-provisioning/rest/] to sync users and groups over to Atlassian products.

            Regards,
            The Atlassian Access team
            {panel}
            ----

            {panel:title=Atlassian status as of 19 Feb 2019|borderStyle=solid|borderColor=#3c78b5|titleBGColor=#4c9aff|bgColor=#deebff}
            Hi everyone,

            The Atlassian Cloud app in *OneLogin* now supports automated user and group provisioning. If you have OneLogin as your identity provider, you can configure the app to automate the provisioning and deprovisioning process and start getting the benefits Dave mentioned below. To get it setup, have a read about [how automatic user provisioning works with Atlassian Cloud|https://confluence.atlassian.com/cloud/user-provisioning-959305316.html] and then follow the instructions on [OneLogin|https://onelogin.service-now.com/support?id=kb_article&sys_id=05501489db792708ca1c400e0b9619ea].

            As a quick summary:
             * We currently support [*Okta*|https://confluence.atlassian.com/cloud/configure-user-provisioning-with-okta-957492956.html] and [*OneLogin*|https://onelogin.service-now.com/support?id=kb_article&sys_id=05501489db792708ca1c400e0b9619ea].
             * We are working on support for *Azure Active Directory*.
             * For other identity providers, you can use the [User provisioning (SCIM) API (documentation at developer.atlassian.com)|https://developer.atlassian.com/cloud/admin/user-provisioning/rest/] to sync users and groups over to Atlassian products.

            Regards,
             The Atlassian Access team
            {panel}
            ----
            {panel:title=Atlassian status as of 31 Jan 2019|borderStyle=solid|borderColor=#3c78b5|titleBGColor=#4c9aff|bgColor=#deebff}
            Hi everyone,

            We're pleased to announce that documentation for the [User provisioning (SCIM) API is now available on developer.atlassian.com|https://developer.atlassian.com/cloud/admin/user-provisioning/rest/]. The API is an implementation of the [SCIM specification|http://www.simplecloud.info/] and is intended to be used to sync users and groups from an identity provider to an [Atlassian organization|https://confluence.atlassian.com/cloud/set-up-an-atlassian-organization-938859734.html]. Once you have linked an Atlassian Cloud site (like example.atlassian.net) to your organization, users and groups will be synced to your site and you can use them to control access to Jira and Confluence Cloud as well as permissions within those products. [Learn more about how automatic user provisioning works with Atlassian Cloud|https://confluence.atlassian.com/cloud/user-provisioning-959305316.html].

            There are several key benefits to automating user provisioning for Atlassian Cloud:
             * It saves you time as an administrator by automating the process of creating and removing Atlassian accounts for your users
             * It improves security by reducing errors in the provisioning/deprovisioning process
             * It can help reduce costs by ensuring you are not billed for users who are no longer active

            The SCIM API is intended for customers who are not already using one of our supported identity providers. [We currently support *Okta*|https://confluence.atlassian.com/cloud/configure-user-provisioning-with-okta-957492956.html] and are actively working on support for *Azure Active Directory* and *Onelogin*. If you are using one of these identity providers, we recommend using the supported Atlassian app for these identity providers as this will simplify the configuration process.

            We're actively working in this area and will share another update when support for additional identity providers is available.

            Regards,
             Dave Meyer
             Atlassian Access Product Management
            {panel}
            *Original request:*

            User management REST API in JIRA Cloud do not support user profile updates, this breaks consumer who relay on these API's to update user profiles. 

            Fix: Expose public API's (SCIM standard) for user management which allows consumers to provision, update, delete users directly with Atlasssian account
            New: {panel:title=Atlassian status as of 7 March 2019|borderStyle=solid|borderColor=#3c78b5|titleBGColor=#4c9aff|bgColor=#deebff}
            Hi everyone,

            The Atlassian Cloud app in *Azure AD* now supports automated user and group provisioning. If you have Azure AD as your identity provider, you can configure the app to automate the provisioning and deprovisioning process. To get it setup, have a read about [how automatic user provisioning works with Atlassian Cloud|https://confluence.atlassian.com/cloud/user-provisioning-959305316.html] and then follow the instructions on [Azure AD|https://docs.microsoft.com/en-us/azure/active-directory/saas-apps/atlassian-cloud-provisioning-tutorial].

            As a quick summary:
             * We currently support [*Okta*|https://confluence.atlassian.com/cloud/configure-user-provisioning-with-okta-957492956.html], [*OneLogin*|https://onelogin.service-now.com/support?id=kb_article&sys_id=05501489db792708ca1c400e0b9619ea], and [*Azure AD*|https://docs.microsoft.com/en-us/azure/active-directory/saas-apps/atlassian-cloud-provisioning-tutorial].
             * For other identity providers, you can use the [User provisioning (SCIM) API (documentation at developer.atlassian.com)|https://developer.atlassian.com/cloud/admin/user-provisioning/rest/] to sync users and groups over to Atlassian products.

            Regards,
             The Atlassian Access team
            {panel}
             
            ----
            *Original request:*

            User management REST API in JIRA Cloud do not support user profile updates, this breaks consumer who relay on these API's to update user profiles. 

            Fix: Expose public API's (SCIM standard) for user management which allows consumers to provision, update, delete users directly with Atlasssian account

              vsankin vlad (Inactive)
              asridhara Adarsh
              Votes:
              167 Vote for this issue
              Watchers:
              160 Start watching this issue

                Created:
                Updated:
                Resolved: