Details
-
Bug
-
Resolution: Invalid
-
High
-
None
Description
Summary
The Google ID of a user is associated with the incorrect Atlassian ID(AID). Customers may have multiple AIDs because of an email address change(or similar). Login process fails as described in "Actual Results" below. Users are unintentionally forced to authenticate with the incorrect AID as a result of the Google ID being associated with the incorrect AID.
Environment
- JIRA 1000.910.0
Steps to Reproduce
- Integrate Google Apps(G-Suite) for single sign-on
- Try to log into instance using the correct email address and password
Expected Results
- Successful login and access to JIRA/Confluence, OR
- Error message stating that PrimaryEmail@example.com doesn't have access
Actual Results
- User is presented with an error that reads similar to:
Aw, shoot. You don't have access with
NotPrimaryEmail@example.comLooks like you don't have access to this site.
- The email address displayed in the error message is not the primary email of the Google account that the customer used to log in.
Notes
- All users on an instance are denied access to JIRA in some cases