Issue Summary

After Atlassian session expires under an Okta SSO authentication policy, users are shown an unnecessary "Choose your account" picker and an additional email confirmation step before being redirected to Okta. The expected behavior is a seamless, direct redirect to Okta without requiring the user to re-enter their email.

Steps to Reproduce

1. Access an Atlassian Cloud instance configured with Okta SSO (e.g., ubereng.atlassian.net).

1. Set the authentication policy's idle session duration to 15 minutes.

1. Leave the session idle until it expires (15 minutes of inactivity).

1. Attempt to resume the session or refresh the page.

1. Observe the "Choose your account" picker appearing.

1. Select the account observe an additional prompt to enter email address before the redirect to Okta occurs.

Expected Results

After session expiry, the user should be redirected directly to Okta for re-authentication without any intermediate Atlassian identity screens. Since the organization uses Okta as the IdP and the authentication policy is already configured, the redirect should be seamless.

Actual Results

Two intermediate screens appear after session expiry:

1. "Choose your account" picker (Home Realm Discovery screen)

1. Email address prompt before routing to Okta

This adds unnecessary friction to the re-authentication flow, even when the user is not signed into multiple Atlassian accounts.
{{}}

No exception log applicable — this is a UX/auth flow behavior issue. Reproduced via screen recording: https://transfer.atlassian.com/preview/28870301/attachment/a4ff94a2-dbd5-42c1-b85a-c7a58392689d

{{}}

Workaround

Currently there is no known workaround for this behavior. A workaround will be added here when available