Issue Summary

      When an account is managed within an organization that implements SSO, the email address of that account cannot be changed to an address that is not under the organization's claimed domains.

      Steps to Reproduce

      1. Claim a domain and setup SSO
      2. Change a managed account's email address to an address that is not under the organization's claimed domains.

      ie. user@domainwithSSO.com -> user@anotherdomain.com

      3. A verification email will be sent to the new email address.

      Expected Results

      When verifying the change, the end user should be redirected to the current account's SSO. Once authenticated, the email address change should complete.

      Actual Results

      User is prompted to enter the account's Atlassian login password to complete. Since the account is still enforced with SSO, there is no available password to use here.

      Workaround

      Contact support and mention them about this bug(ID-7435)

        1. password.png
          password.png
          110 kB
        2. verify.png
          verify.png
          87 kB

            [ID-7435] SSO blocks email address change

            Kat N added a comment -
            Atlassian Update – 21 Dec 2022

            Hi everyone,
            Thank you for raising and following this bug report. Because there have been no new reports of this issue over the last year, we are closing this ticket as "Timed Out". If this bug is continuing to impact your team, please let us know in a comment on the ticket. Thanks again for continuing to provide valuable feedback to our team.

            Kat N added a comment - Atlassian Update – 21 Dec 2022 Hi everyone, Thank you for raising and following this bug report. Because there have been no new reports of this issue over the last year, we are closing this ticket as "Timed Out". If this bug is continuing to impact your team, please let us know in a comment on the ticket. Thanks again for continuing to provide valuable feedback to our team.

            Hi rmacalinao, I think you have now access to the panel to send this links. Is that ok?

            Angel Bartomeu added a comment - Hi rmacalinao , I think you have now access to the panel to send this links. Is that ok?

            rmacalinao, it will be available for the SSO users as well upon the admin requesting for this option. 

            Can we close this issue if there is another tracking ticket to disable SSO? 

            Sai Majeti added a comment - rmacalinao , it will be available for the SSO users as well upon the admin requesting for this option.  Can we close this issue if there is another tracking ticket to disable SSO? 

            Sai Majeti added a comment -

            work around:  as mentioned in https://hello.atlassian.net/wiki/spaces/CR/pages/643239145/Identity+Release+Readiness+-+SAML+SSO+blocked+from+email+can+t+login+bypass ,  we can raise a DOS ticket with the Kirby team to send a email to the customer for logging in. 

            Sai Majeti added a comment - work around:  as mentioned in  https://hello.atlassian.net/wiki/spaces/CR/pages/643239145/Identity+Release+Readiness+-+SAML+SSO+blocked+from+email+can+t+login+bypass  ,  we can raise a DOS ticket with the Kirby team to send a email to the customer for logging in. 

            Sai Majeti added a comment -

            created https://hello.atlassian.net/browse/LINK-785 to track this issue. 

            Sai Majeti added a comment - created  https://hello.atlassian.net/browse/LINK-785  to track this issue. 

            Sai Majeti added a comment -

            rmacalinao Can you let me know if this is a request from customer? 

            Even if we can provide a work around, the user will not be able to login later since the updated domain's email is unclaimed. Can you explain me how this would benefit the customer? 

            Sai Majeti added a comment - rmacalinao  Can you let me know if this is a request from customer?  Even if we can provide a work around, the user will not be able to login later since the updated domain's email is unclaimed. Can you explain me how this would benefit the customer? 

              Unassigned Unassigned
              rmacalinao Ramon M
              Affected customers:
              0 This affects my team
              Watchers:
              10 Start watching this issue

                Created:
                Updated:
                Resolved: