CINXE.COM

<!DOCTYPE html>  <html class="content-platform-support" lang="en-US" itemscope> <head> <title>Understand user provisioning | Atlassian Support</title>   <script src="https://atl-onetrust-wrapper.atlassian.com/assets/atl-onetrust-wrapper.min.js" type="text/javascript" data-domain="266b339b-197a-46d0-a605-808d1b1feb41" data-test="false" data-geofence="false" data-sync="true" ></script>  <script> window.sentryOnLoad = function () { console.log('Initializing Sentry...'); Sentry.init({ release: 'a2b17584df699a8dea16f0d197bb8573773aea89', environment: 'production', }); console.log("Sentry is initialized for 'production' environment and 'a2b17584df699a8dea16f0d197bb8573773aea89' release."); }; </script> <script src="https://js.sentry-cdn.com/58cc8f6260224318b0e9c5e635d9dbf4.min.js" crossorigin="anonymous" data-lazy="no"></script> <script> // These are the env variables that the frontend needs window.contentfulSpaceId = "zsv3d0ugroxu"; window.CCG_DETAILS_URL = "https://support.atlassian.com/gateway/api/customer-context/customer/details"; window.CONTENTFUL_ENV = "master"; window.LOGOUT_URL = "https://id.atlassian.com/logout"; window.CONTACT_FORMS_MANIFEST = "https://support-form-app-ui.prod-east.frontend.public.atl-paas.net/assets/asset-manifest.json"; window.SEGMENT_KEY = "ycih1ygfsk"; window.LD_CLIENT_SDK_KEY = "5d2416de0d7d7c0763fc77c5"; window.BANNERMAN_MANIFEST = "https://bannerman.us-east-1.prod.public.atl-paas.net/asset-manifest.json"; window.SAC_CST_TOKEN_COOKIE_NAME = "cloud.session.token"; window.SAC_OIDC_TOKEN_COOKIE_NAME = "sac_oidc_token"; window.SAC_BASE_URL = "https://support.atlassian.com"; window.CSM_CHAT_WIDGET_BASE_URL = "https://jcs-chat-widget.atlassian.com"; window.MY_REQUESTS_APP_MANIFEST_URL = "https://customer-support-portal.prod.atl-paas.net/asset-manifest.json"; window.CST_STATIC_FORMS_URL = "https://support-forms.atlassian.com"; window.CST_STATIC_FORMS_MANIFEST_URL = "https://support-forms.atlassian.com/asset-manifest.json"; window.ID_AUTH_URL = "https://id.atlassian.com"; window.CONFLUENCE_URL = "https://confluence.atlassian.com"; window.GRAPHQL_URL = "http://graphql-gateway.mesh:20019" window.STATSIG_CLIENT_API_KEY = "659383a9-602f-4a53-a80e-f8882b294b80" window.MICROS_ENVTYPE = "prod" window.CSP_REQUESTS_APP_MANIFEST_URL_BIFROST = "https://csp-mono-repo-ui.prod-east.frontend.public.atl-paas.net/assets/asset-manifest.json" window.__APP_INITIAL_STATE__ = /* <sl:translate_generic_json> */ { sl_translate: "title, description, shortDescription, sacHomeDescription, productSupportHomeDescription, sectionOverview, shortTitle, topicTitle, buttonText, linkLabel, productBlurb, tagline, subhead, metaDescription, supportTitle, internalTitle", entry: {"id":"7gNu65G72Su9Tu5vIGiIt8","lastPublished":"2024-09-19T20:37:47.354Z","firstPublishedAt":"2020-12-16T23:35:59.991Z","type":"topic","topicType":"Procedure","topicTitle":"Understand user provisioning","description":"Learn how user provisioning works and how users and groups sync when you make changes from your identity provider.","metaDescription":"Sync users and groups from a directory in your identity provider with SCIM user provisioning.","publishTo":["support.atlassian.com (SAC)"],"ownershipTeam":null,"featuredVideo":null,"taxonomyUserRoleRef":[],"body":"<div class='adf__content'><div style='position:absolute;left:-9999px;width:1px;height:1px;overflow:hidden'></div><div style='position:absolute;height:0;width:100%'><object data='about:blank' type='text/html' style='position:absolute;height:0;width:100%' aria-hidden='true' tabindex='-1'></object></div><div class='ak-renderer-wrapper sc-dymIpo gEdAYa'><div></div><div class='sc-kXeGPI fIPKnQ'><div class='ak-renderer-document'><p data-renderer-start-pos='0'>We support user provisioning using the System for Cross-domain Identity Management (SCIM), and this feature uses the SCIM 2.0 version of the protocol.</p><p data-renderer-start-pos='152'>User provisioning integrates an external user directory with your Atlassian organization. This integration allows you to automatically update the users and groups in your Atlassian organization when you make updates in your identity provider. For example, with user provisioning, you can create, link, and deactivate managed Atlassian user accounts from your identity provider.</p><div class='pm-table-container ' data-layout='default' style='width:inherit'><div class='pm-table-wrapper'><table data-number-column='false'><tbody><tr><td rowspan='1' colSpan='1'><p data-renderer-start-pos='531'><span><span class='text-fragment' data-testid='inline-text-fragment'><span><span><span><span role='presentation'><span class='icon-extension' data-testid='icon' style='white-space:normal'><span class='Icon__IconWrapper-dyhwwi-0 dqqHMN'><svg width='24' height='24' viewBox='0 0 24 24' focusable='false' role='presentation'><g fill='currentColor' fill-rule='evenodd'><path d='M6 14c0-1.105.902-2 2.009-2h7.982c1.11 0 2.009.894 2.009 2.006v4.44c0 3.405-12 3.405-12 0V14z'></path><circle cx='12' cy='7' r='4'></circle></g></svg></span></span></span></span></span><strong>Who can do this?</strong></span></span></span><br><strong>Role:</strong> <span><span class='text-fragment' data-testid='inline-text-fragment'><span>Organization admin</span></span></span><br><strong>Plan:</strong> <span><span class='text-fragment' data-testid='inline-text-fragment'><span><span><a href='https://support.atlassian.com/security-and-access-policies/docs/understand-atlassian-guard/' data-testid='sac-link-extension' target='_blank' rel='noopener noreferrer'>Atlassian Guard Standard</a></span></span></span></span></p></td></tr></tbody></table></div></div><h2 id='Supported-identity-providers'>Supported identity providers</h2><p data-renderer-start-pos='586'>You can use the identity provider of your choice, but some capabilities are only available with selected identity providers. <span><a href='https://support.atlassian.com/provisioning-users/docs/supported-identity-providers/' data-testid='sac-link-extension' target='_blank' rel='noopener noreferrer'>Learn which identity providers we support</a></span> </p><p data-renderer-start-pos='716'>The steps involved to set up user provisioning will differ depending on the identity provider you use. Here are setup instructions for some of the commonly used identity providers:</p><ul class='ak-ul'><li><p data-renderer-start-pos='898'>Okta: <span><a href='https://support.atlassian.com/provisioning-users/docs/configure-user-provisioning-with-okta/' data-testid='sac-link-extension' target='_blank' rel='noopener noreferrer'>Learn how to configure user provisioning with Okta</a></span> </p></li><li><p data-renderer-start-pos='910'>OneLogin: <a class='sc-eIHaNI fVLHZh' href='https://onelogin.service-now.com/support?id=kb_article&sys_id=05501489db792708ca1c400e0b9619ea' title='https://onelogin.service-now.com/support?id=kb_article&sys_id=05501489db792708ca1c400e0b9619ea'>Learn how to configure user provisioning for OneLogin</a></p></li><li><p data-renderer-start-pos='977'>Azure AD: <a class='sc-eIHaNI fVLHZh' href='https://docs.microsoft.com/en-us/azure/active-directory/saas-apps/atlassian-cloud-provisioning-tutorial' title='https://docs.microsoft.com/en-us/azure/active-directory/saas-apps/atlassian-cloud-provisioning-tutorial'>Learn how to configure user provisioning for Azure AD</a></p></li><li><p data-renderer-start-pos='1044'>Google Cloud:<span><a href='https://support.atlassian.com/provisioning-users/docs/configure-user-provisioning-with-google-cloud/' data-testid='sac-link-extension' target='_blank' rel='noopener noreferrer'>Configure user provisioning with Google Cloud</a></span> </p></li><li><p data-renderer-start-pos='1063'>Google Workspace: <a class='sc-eIHaNI fVLHZh' href='https://support.atlassian.com/provisioning-users/docs/connect-to-g-suite/' title='https://support.atlassian.com/provisioning-users/docs/connect-to-g-suite/'>Learn how to set up user provisioning for Google Workspace </a></p></li><li><p data-renderer-start-pos='1144'>PingFederate: <a class='sc-eIHaNI fVLHZh' href='https://docs.pingidentity.com/r/en-us/pingfederate-atlassian-cloud-connector' title='https://docs.pingidentity.com/r/en-us/pingfederate-atlassian-cloud-connector'>Learn how to configure user provisioning for PingFederate</a></p></li><li><p data-renderer-start-pos='1219'>JumpCloud: <a class='sc-eIHaNI fVLHZh' href='https://support.jumpcloud.com/support/s/article/Identity-Management-with-Atlassian-Cloud' title='https://support.jumpcloud.com/support/s/article/Identity-Management-with-Atlassian-Cloud'>Learn how to configure user provisioning for JumpCloud</a></p></li></ul><p data-renderer-start-pos='1290'>If you want to use an identity provider that isn’t supported, you can use the <a class='sc-eIHaNI fVLHZh' href='https://developer.atlassian.com/cloud/admin/user-provisioning/rest' title='https://developer.atlassian.com/cloud/admin/user-provisioning/rest'>user provisioning API</a> to create your own integration that allows you to manage users and groups.</p><p data-renderer-start-pos='1466'>Before you configure user provisioning, you’ll need to add your identity provider to your Atlassian organization. <span><a href='https://support.atlassian.com/provisioning-users/docs/choose-your-identity-provider/' data-testid='sac-link-extension' target='_blank' rel='noopener noreferrer'>Learn how to add an identity provider </a></span> </p><h2 id='Available-attributes-for-mapping'>Available attributes for mapping</h2><p data-renderer-start-pos='1619'>This is the attribute mapping between an identity provider and your Atlassian organization.</p><div class='pm-table-container ' data-layout='default' style='width:inherit'><div class='pm-table-wrapper'><table data-number-column='false'><tbody><tr><th rowspan='1' colSpan='1' style='background-color:var(--ds-background-neutral, #F4F5F7)'><p data-renderer-start-pos='1712'><strong>SCIM attribute</strong></p></th><th rowspan='1' colSpan='1' style='background-color:var(--ds-background-neutral, #F4F5F7)'><p data-renderer-start-pos='1730'><strong>AtlassianCloud attribute</strong></p></th></tr><tr><td rowspan='1' colSpan='1'><p data-renderer-start-pos='1760'>nickName</p></td><td rowspan='1' colSpan='1'><p data-renderer-start-pos='1772'>Publicname</p></td></tr></tbody></table></div></div><p data-renderer-start-pos='1790'>The way you map attributes changes depending on your identity provider. Check out the step-by-step instructions for Okta, OneLogin, and Microsoft Azure AD.<br><a class='sc-eIHaNI fVLHZh' href='https://support.atlassian.com/provisioning-users/docs/sync-user-attributes-to-your-organization/' title='https://support.atlassian.com/provisioning-users/docs/sync-user-attributes-to-your-organization/'>Learn how to map attributes</a></p><h2 id='Supported-products'>Supported products</h2><p data-renderer-start-pos='1995'>Provisioning is available for all Atlassian accounts, which means that you can create, update, and deactivate accounts from your identity provider. Syncing groups is only currently available for Jira product instances, Confluence, Trello and not yet available for Bitbucket.</p><p data-renderer-start-pos='2271'>When a Trello Enterprise is linked to an Atlassian organization, any users who were already provisioned to the organization via SCIM, as well as any users provisioned this way going forward, will have a free Trello account provisioned. The account will be managed by the Trello Enterprise but will not have an Enterprise license unless granted one by an admin.</p><h2 id='How-user-provisioning-works'>How user provisioning works</h2><p data-renderer-start-pos='2662'>After you connect your identity provider to your organization, your users and groups sync to your organization and sites, making them available for granting product access. This diagram illustrates how users and groups sync once you set up user provisioning.</p><div class='ak-renderer-extension ' style='width:100%' data-layout='default'><div class='ak-renderer-extension-overflow-container'><div style='text-align:center'><img style='max-width:100%;border:2px inset rgba(9,30,66,0.08);-webkit-border-radius:3px;-moz-border-radius:3px;border-radius:3px' src='//images.ctfassets.net/zsv3d0ugroxu/fz3yfJt59O10E0j2Yd442/2903b536866e350bf6a0c490956e05df/diagram_UserProvisioningOverview' alt='Diagram of identity provider connecting to your organization - your users and groups sync to your organization and sites'></div></div></div><p data-renderer-start-pos='2923'>The next few sections break down how the synchronization works:</p><ul class='ak-ul'><li><p data-renderer-start-pos='2988'>Allowed number of groups and users</p></li><li><p data-renderer-start-pos='3026'>Users and groups sync from your identity provider to your organization</p></li><li><p data-renderer-start-pos='3100'>Your organization’s directory syncs to all associated sites</p></li><li><p data-renderer-start-pos='3163'>Groups get assigned to products</p></li></ul><p data-renderer-start-pos='3200'><a class='sc-eIHaNI fVLHZh' href='https://youtu.be/7EQhYz-vApw' title='https://youtu.be/7EQhYz-vApw'>Learn more about user provisioning in this video</a></p><h3 id='Allowed-number-of-groups-and-users'>Allowed number of groups and users</h3><p data-renderer-start-pos='3286'>A large number of groups and users can take a while to sync to an Atlassian organization. These are the limits for how many groups you can sync.</p><p data-renderer-start-pos='3432'>You can only sync up to:</p><ul class='ak-ul'><li><p data-renderer-start-pos='3458'>300,000 users per organization</p></li><li><p data-renderer-start-pos='3492'>150,000 users per group. </p></li><li><p data-renderer-start-pos='3522'>200,000 groups per identity provider directory. To add more groups,<a class='sc-eIHaNI fVLHZh' href='https://support.atlassian.com/contact/#/' title='https://support.atlassian.com/contact/#/'> contact customer support</a>.</p></li></ul><h3 id='Users-and-groups-sync-from-your-identity-provider-to-your-organization'>Users and groups sync from your identity provider to your organization</h3><p data-renderer-start-pos='3693'>When you set up user provisioning, you create a directory for your users. All users and groups in your identity provider from your verified domain(s) or from outside your verified domain(s) sync to your organization's directory, as shown in the diagram.</p><p data-renderer-start-pos='3948'>You create the groups to provision to your identity provider directory. For some organizations, you continue to see a group we create called <strong>All members for directory - <</strong><em><strong>directory_id</strong></em><strong>></strong>, and add all users to.</p><p data-renderer-start-pos='4156'>If you use Google Workspace, you will see a group we created called All users for Google Workspace.</p><div class='ak-renderer-extension ' style='width:100%' data-layout='default'><div class='ak-renderer-extension-overflow-container'><div style='text-align:center'><img style='max-width:100%;border:2px inset rgba(9,30,66,0.08);-webkit-border-radius:3px;-moz-border-radius:3px;border-radius:3px' src='//images.ctfassets.net/zsv3d0ugroxu/2uV6bXipBgeWxXaSTRewAq/1f9820608825ce406fde77e6b530b875/diagram_UserProvisioning1' alt='Diagram of identity provider for different groups syncing with your organization'></div></div></div><p data-renderer-start-pos='4258'>After you connect your identity provider to your Atlassian organization, synced directory groups appear in your Atlassian organization and you're unable to make changes to a user's account from the organization.</p><p data-renderer-start-pos='4471'>If your Atlassian organization already has existing users from a <strong>verified domain</strong>:</p><ul class='ak-ul'><li><p data-renderer-start-pos='4554'><em>And the identity provider has a user with the same email address as a user in your organization</em>, we create a link between both user accounts. You can only make changes to the user's account from your identity provider.<br><br></p></li><li><p data-renderer-start-pos='4777'><em>And the identity provider doesn't have a user with the same email address as a user in your organization</em>, the user's access remains the same and you can still manage that user from your Atlassian organization.</p></li></ul><p data-renderer-start-pos='4992'>If your Atlassian organization already has existing users from an <strong>unverified domain</strong>:</p><ul class='ak-ul'><li><p data-renderer-start-pos='5078'><em>And the identity provider has a user with the same email address in your organization</em>, we create a link between both user accounts. You can only make changes to the user’s account from your identity provider.</p><p data-renderer-start-pos='5288'><br>You may want to avoid syncing an existing user from an unverified domain. The user may get access to content in your organization or product access, based on how you set up groups to sync from your identity provider. <br><br>We recommend you verify the domain for these users to control access to your organization’s content and access to Atlassian products. <a class='sc-eIHaNI fVLHZh' href='https://support.atlassian.com/user-management/docs/verify-a-domain-to-manage-accounts/' title='https://support.atlassian.com/user-management/docs/verify-a-domain-to-manage-accounts/'>How to verify a domain</a></p></li></ul><div style='background:#DEEBFF' class='ak-editor-panel' data-panel-type='info'><span style='color:#0052CC' class='ak-editor-panel__icon'><span class='sc-bnXvFD jjYaPd' role='img' aria-label='Panel info'><svg width='24' height='24' viewBox='0 0 24 24' focusable='false' role='presentation'><path d='M12 20a8 8 0 1 1 0-16 8 8 0 0 1 0 16zm0-8.5a1 1 0 0 0-1 1V15a1 1 0 0 0 2 0v-2.5a1 1 0 0 0-1-1zm0-1.125a1.375 1.375 0 1 0 0-2.75 1.375 1.375 0 0 0 0 2.75z' fill='currentColor' fill-rule='evenodd'></path></svg></span></span><div class='ak-editor-panel__content'><p data-renderer-start-pos='5670'>Syncing more than 500 groups will take a significant amount of time. Be prepared to wait a while for the sync to complete. </p></div></div><h3 id='Your-organization’s-directory-syncs-to-all-associated-sites'>Your organization’s directory syncs to all associated sites</h3><p data-renderer-start-pos='5858'>Any sites you've added to your organization now have access to your provisioned users and groups, as shown in the diagram. Synced directory groups will appear along the default and native groups in your sites.</p><div class='ak-renderer-extension ' style='width:100%' data-layout='default'><div class='ak-renderer-extension-overflow-container'><div style='text-align:center'><img style='max-width:100%;border:2px inset rgba(9,30,66,0.08);-webkit-border-radius:3px;-moz-border-radius:3px;border-radius:3px' src='//images.ctfassets.net/zsv3d0ugroxu/5Y3X15svPAwe6GmAvvUaFX/2172155ffed774492407cfe822f3a172/diagram_UserProvisioning2' alt='Diagram of your organization’s directory syncing to all associated sites'></div></div></div><h3 id='Groups-get-assigned-to-products'>Groups get assigned to products</h3><p data-renderer-start-pos='6103'>You can start granting users product access by assigning groups to your site's products.</p><div class='ak-renderer-extension ' style='width:100%' data-layout='default'><div class='ak-renderer-extension-overflow-container'><div style='text-align:center'><img style='max-width:100%;border:2px inset rgba(9,30,66,0.08);-webkit-border-radius:3px;-moz-border-radius:3px;border-radius:3px' src='//images.ctfassets.net/zsv3d0ugroxu/5JGEd8XRTU7GzkTuyVasSy/ed438723a1cc86d2c18b5c76acf5e965/diagram_UserProvisioning3.png' alt='Diagram of cloud sites getting assigned to Jira Software an to Confluence '></div></div></div><p data-renderer-start-pos='6194'>When users have product access, Jira and Confluence admins can update product permissions for those users from the Jira and Confluence settings. See <span><a href='https://support.atlassian.com/jira-cloud-administration/docs/manage-global-permissions/' data-testid='sac-link-extension' target='_blank' rel='noopener noreferrer'>Manage global permissions</a></span> for administering Jira permissions and <span><a href='https://support.atlassian.com/confluence-cloud/docs/manage-site-level-permissions/' data-testid='sac-link-extension' target='_blank' rel='noopener noreferrer'>Manage global permissions in Confluence administration</a></span> for administering Confluence permissions.</p><h2 id='User-provisioning-features'>User provisioning features</h2><p data-renderer-start-pos='6457'>Once you connect your identity provider to your Atlassian organization, you manage all user attributes and group memberships from your identity provider. If you want to manage users from your Atlassian organization, disable the connection with your identity provider.</p><div style='background:#DEEBFF' class='ak-editor-panel' data-panel-type='info'><span style='color:#0052CC' class='ak-editor-panel__icon'><span class='sc-bnXvFD jjYaPd' role='img' aria-label='Panel info'><svg width='24' height='24' viewBox='0 0 24 24' focusable='false' role='presentation'><path d='M12 20a8 8 0 1 1 0-16 8 8 0 0 1 0 16zm0-8.5a1 1 0 0 0-1 1V15a1 1 0 0 0 2 0v-2.5a1 1 0 0 0-1-1zm0-1.125a1.375 1.375 0 1 0 0-2.75 1.375 1.375 0 0 0 0 2.75z' fill='currentColor' fill-rule='evenodd'></path></svg></span></span><div class='ak-editor-panel__content'><h3 id='Manage-group-names'>Manage group names</h3><ul class='ak-ul'><li><p data-renderer-start-pos='6746'><em>Rename groups after they've synced to your Atlassian organization</em>. You’ll need to create a new group with the desired name, update its membership, and delete the old group.</p></li></ul><h3 id='Resolve-group-conflicts'>Resolve group conflicts</h3><ul class='ak-ul'><li><p data-renderer-start-pos='6949'><em>Review group names before they’ve synced to your Atlassian organization. </em>You’ll need to rename groups with the same name in your identity provider and Atlassian organization. <span><a href='https://support.atlassian.com/provisioning-users/docs/resolve-group-conflicts-when-syncing-users/' data-testid='sac-link-extension' target='_blank' rel='noopener noreferrer'>Learn how to resolve group conflicts when syncing users</a></span> </p></li></ul></div></div><h3 id='Supported-user-account-operations'>Supported user account operations</h3><p data-renderer-start-pos='7169'>When you perform these user management operations from your identity provider, your updates will sync with your Atlassian organization.</p><p data-renderer-start-pos='7306'>We sync user accounts from your identity provider to your Atlassian organization when they have email addresses from your verified domain(s) and from outside your verified domain(s). </p><div class='pm-table-container ' data-layout='default' style='width:inherit'><div class='pm-table-wrapper'><table data-number-column='false'><colgroup><col style='width:102px'><col style='width:405px'></colgroup><tbody><tr><th rowspan='1' colSpan='1' data-colwidth='121'><p data-renderer-start-pos='7491'><strong>Operations</strong></p></th><th rowspan='1' colSpan='1' data-colwidth='477'><p data-renderer-start-pos='7505'><strong>Notes</strong></p></th></tr><tr><td rowspan='1' colSpan='1' data-colwidth='121'><p data-renderer-start-pos='7516'>Create a new user account</p></td><td rowspan='1' colSpan='1' data-colwidth='477'><p data-renderer-start-pos='7545'>A user account gets created when it has an email address from your verified domain(s) or from outside your verified domain(s).</p></td></tr><tr><td rowspan='1' colSpan='1' data-colwidth='121'><p data-renderer-start-pos='7677'>Link an existing user account</p></td><td rowspan='1' colSpan='1' data-colwidth='477'><p data-renderer-start-pos='7710'>If an Atlassian account already exists on the Atlassian platform, we'll automatically link the user in your identity provider to the user in your Atlassian organization.</p></td></tr><tr><td rowspan='1' colSpan='1' data-colwidth='121'><p data-renderer-start-pos='7885'>Update a user's account details</p></td><td rowspan='1' colSpan='1' data-colwidth='477'><p data-renderer-start-pos='7920'>You can update these user attributes from your identity provider:</p><ul class='ak-ul'><li><p data-renderer-start-pos='7987'>Display name: This is a combination of a user’s first and last name. If you update the display name it also overwrites the attributes for first and last name.</p></li><li><p data-renderer-start-pos='8149'>Email address</p></li><li><p data-renderer-start-pos='8166'>Organization</p></li><li><p data-renderer-start-pos='8182'>Job title</p></li><li><p data-renderer-start-pos='8195'>Timezone</p></li><li><p data-renderer-start-pos='8207'>Department</p></li><li><p data-renderer-start-pos='8221'>Preferred language</p></li></ul><div style='background:#FFFAE6' class='ak-editor-panel' data-panel-type='warning'><span style='color:#FF991F' class='ak-editor-panel__icon'><span class='sc-bnXvFD jjYaPd' role='img' aria-label='Panel warning'><svg width='24' height='24' viewBox='0 0 24 24' focusable='false' role='presentation'><g fill-rule='evenodd'><path d='M12.938 4.967c-.518-.978-1.36-.974-1.876 0L3.938 18.425c-.518.978-.045 1.771 1.057 1.771h14.01c1.102 0 1.573-.797 1.057-1.771L12.938 4.967z' fill='currentColor'></path><path d='M12 15a1 1 0 0 1-1-1V9a1 1 0 0 1 2 0v5a1 1 0 0 1-1 1m0 3a1 1 0 0 1 0-2 1 1 0 0 1 0 2' fill='inherit'></path></g></svg></span></span><div class='ak-editor-panel__content'><p data-renderer-start-pos='8245'>When you update an email address from a verified or unverified domain to an unverified domain it:</p><ul class='ak-ul'><li><p data-renderer-start-pos='8344'>Removes the user from groups provisioned by SCIM</p></li><li><p data-renderer-start-pos='8396'>May cause the user to lose product access granted in the SCIM group</p></li></ul><p data-renderer-start-pos='8469'>To make sure users aren’t removed from product access groups, <span><a href='https://support.atlassian.com/user-management/docs/verify-a-domain-to-manage-accounts/' data-testid='sac-link-extension' target='_blank' rel='noopener noreferrer'>verify a domain</a></span> in your Atlassian organization first.</p></div></div><div style='background:#DEEBFF' class='ak-editor-panel' data-panel-type='info'><span style='color:#0052CC' class='ak-editor-panel__icon'><span class='sc-bnXvFD jjYaPd' role='img' aria-label='Panel info'><svg width='24' height='24' viewBox='0 0 24 24' focusable='false' role='presentation'><path d='M12 20a8 8 0 1 1 0-16 8 8 0 0 1 0 16zm0-8.5a1 1 0 0 0-1 1V15a1 1 0 0 0 2 0v-2.5a1 1 0 0 0-1-1zm0-1.125a1.375 1.375 0 1 0 0-2.75 1.375 1.375 0 0 0 0 2.75z' fill='currentColor' fill-rule='evenodd'></path></svg></span></span><div class='ak-editor-panel__content'><p data-renderer-start-pos='8574'>About attributes for users outside of your verified domain</p><p data-renderer-start-pos='8634'>Users from outside your verified domain aren't managed accounts. When you update attributes in your identity provider for these users, we won't sync the updates.</p></div></div></td></tr><tr><td rowspan='1' colSpan='1' data-colwidth='121'><p data-renderer-start-pos='8803'>Activate a user account</p></td><td rowspan='1' colSpan='1' data-colwidth='477'><p data-renderer-start-pos='8830'>You can activate a user's Atlassian account from your identity provider.</p></td></tr><tr><td rowspan='1' colSpan='1' data-colwidth='121'><p data-renderer-start-pos='8908'>Deactivate a user account</p></td><td rowspan='1' colSpan='1' data-colwidth='477'><p data-renderer-start-pos='8937'>You can deactivate the Atlassian account for users from your verified domain in the identity provider.</p><p data-renderer-start-pos='9041'>When you deactivate users <strong>outside</strong> your verified domain:</p><ul class='ak-ul'><li><p data-renderer-start-pos='9098'>User is removed from group provisioned by SCIM</p></li><li><p data-renderer-start-pos='9148'>User could lose product access granted in the SCIM group</p></li><li><p data-renderer-start-pos='9208'>User has Atlassian site access</p></li></ul><p data-renderer-start-pos='9244'>To remove site access after deactivation, you can remove the user from the site.</p></td></tr><tr><td rowspan='1' colSpan='1' data-colwidth='121'><p data-renderer-start-pos='9330'>Delete a user account</p></td><td rowspan='1' colSpan='1' data-colwidth='477'><p data-renderer-start-pos='9355'>We recommend you deactivate a user's account in your identity provider before you delete a user account.</p><p data-renderer-start-pos='9461'>To delete a user's Atlassian account from your verified domain, delete the user from the Atlassian directory in your organization.<br><br></p><div style='background:#DEEBFF' class='ak-editor-panel' data-panel-type='info'><span style='color:#0052CC' class='ak-editor-panel__icon'><span class='sc-bnXvFD jjYaPd' role='img' aria-label='Panel info'><svg width='24' height='24' viewBox='0 0 24 24' focusable='false' role='presentation'><path d='M12 20a8 8 0 1 1 0-16 8 8 0 0 1 0 16zm0-8.5a1 1 0 0 0-1 1V15a1 1 0 0 0 2 0v-2.5a1 1 0 0 0-1-1zm0-1.125a1.375 1.375 0 1 0 0-2.75 1.375 1.375 0 0 0 0 2.75z' fill='currentColor' fill-rule='evenodd'></path></svg></span></span><div class='ak-editor-panel__content'><p data-renderer-start-pos='9594'>Unable to delete user account for users outside your verified domain</p><p data-renderer-start-pos='9664'>When you delete a user from your identity provider, we deactivate the user account. To learn what happens when we deactivate, view the “deactivate a user account” section.</p></div></div></td></tr></tbody></table></div></div><h3 id='Supported-group-operations'>Supported group operations</h3><p data-renderer-start-pos='9873'>Use groups to manage admin permissions and product access (new licenses) from your identity provider and these updates will sync with your Atlassian organization.</p><p data-renderer-start-pos='10037'>Any group that is marked as a default group can't be managed via SCIM integration. You can only manage groups synced from your identity provider directory via SCIM.</p><div class='pm-table-container ' data-layout='default' style='width:inherit'><div class='pm-table-wrapper'><table data-number-column='false'><colgroup><col style='width:104px'><col style='width:403px'></colgroup><tbody><tr><th rowspan='1' colSpan='1' data-colwidth='123'><p data-renderer-start-pos='10203'><strong>Operations</strong></p></th><th rowspan='1' colSpan='1' data-colwidth='475'><p data-renderer-start-pos='10217'><strong>Notes</strong></p></th></tr><tr><td rowspan='1' colSpan='1' data-colwidth='123'><p data-renderer-start-pos='10228'>Create a group</p></td><td rowspan='1' colSpan='1' data-colwidth='475'><p data-renderer-start-pos='10246'>The group gets created as a read-only group in the organization's directory. You can only edit groups from your identity provider. Give the new group a name that doesn't already exist your organization.</p></td></tr><tr><td rowspan='1' colSpan='1' data-colwidth='123'><p data-renderer-start-pos='10454'>Delete a group</p></td><td rowspan='1' colSpan='1' data-colwidth='475'><p data-renderer-start-pos='10472'>Delete a group from your identity provider to remove the group from your organization's directory.</p></td></tr><tr><td rowspan='1' colSpan='1' data-colwidth='123'><p data-renderer-start-pos='10576'>Push an existing group</p></td><td rowspan='1' colSpan='1' data-colwidth='475'><p data-renderer-start-pos='10602'>If you try to push a group from your identity provider that has the same name as a group in your organization, you'll get an error.</p></td></tr><tr><td rowspan='1' colSpan='1' data-colwidth='123'><p data-renderer-start-pos='10739'>Update group membership</p></td><td rowspan='1' colSpan='1' data-colwidth='475'><p data-renderer-start-pos='10766'>You can update groups from your identity provider to configure product access, admin privileges, or application-specific settings, such as Confluence space permissions.</p></td></tr></tbody></table></div></div><h3 id='Troubleshooting'>Troubleshooting</h3><p data-renderer-start-pos='10959'>When troubleshooting issues with syncing users and groups, check the <strong>Troubleshooting log</strong> on the <strong>User provisioning </strong>page of your Atlassian organization.</p><div class='pm-table-container ' data-layout='default' style='width:inherit'><div class='pm-table-wrapper'><table data-number-column='false'><colgroup><col style='width:153px'><col style='width:286px'><col style='width:68px'></colgroup><tbody><tr><th rowspan='1' colSpan='1' data-colwidth='180'><p data-renderer-start-pos='11111'><strong>Problem</strong></p></th><th rowspan='1' colSpan='1' data-colwidth='337'><p data-renderer-start-pos='11122'><strong>Workaround / troubleshooting tips</strong></p></th><th rowspan='1' colSpan='1' data-colwidth='80'><p data-renderer-start-pos='11159'><strong>Recorded in log</strong></p></th></tr><tr><td rowspan='1' colSpan='1' data-colwidth='180'><p data-renderer-start-pos='11180'>A group has successfully synced, but the group is empty and doesn't include any synced users.</p></td><td rowspan='1' colSpan='1' data-colwidth='337'><p data-renderer-start-pos='11277'>When pushing a group, make sure that the synchronized group does not have the same name as a default group (e.g. <em>org-admins</em> or <em>site-admins</em>) or a manually created group.</p></td><td rowspan='1' colSpan='1' data-colwidth='80'><p data-renderer-start-pos='11449'>Yes</p></td></tr><tr><td rowspan='1' colSpan='1' data-colwidth='180'><p data-renderer-start-pos='11458'>A group synced successfully, but you don't see it in the site admin area and can't find it on the <strong>Product access</strong> page.</p></td><td rowspan='1' colSpan='1' data-colwidth='337'><p data-renderer-start-pos='11580'>Make sure you added the site to your organization. To add the site, use the <strong>Add a site </strong>option from your Atlassian organization.</p></td><td rowspan='1' colSpan='1' data-colwidth='80'><p data-renderer-start-pos='11711'>No</p></td></tr><tr><td rowspan='1' colSpan='1' data-colwidth='180'><p data-renderer-start-pos='11719'>A user seems to be successfully synced, but the user account doesn't appear on the <strong>Managed accounts</strong> page.</p></td><td rowspan='1' colSpan='1' data-colwidth='337'><p data-renderer-start-pos='11828'>Check that the user's email address is part of your verified domain. <br><br>If the user's account doesn't have an email address with your verified domain, you can navigate to <strong>Products</strong> > <strong>Users</strong> page to find the user account.</p></td><td rowspan='1' colSpan='1' data-colwidth='80'><p data-renderer-start-pos='12049'>Yes</p></td></tr><tr><td rowspan='1' colSpan='1' data-colwidth='180'><p data-renderer-start-pos='12058'>(If Okta is your identity provider) Users don't sync to the organization directory when they were already assigned to the Atlassian app before the user provisioning integration is complete.</p></td><td rowspan='1' colSpan='1' data-colwidth='337'><p data-renderer-start-pos='12251'>To sync users correctly, reassign them from the <strong>Assignments</strong> tab. If a group contains the affected users, you can reassign the group instead.</p></td><td rowspan='1' colSpan='1' data-colwidth='80'><p data-renderer-start-pos='12395'>No</p></td></tr><tr><td rowspan='1' colSpan='1' data-colwidth='180'><p data-renderer-start-pos='12403'>(If Azure is your identity provider) Users don't sync to the organization directory and you're unable to troubleshoot with the error description from the Azure log.</p></td><td rowspan='1' colSpan='1' data-colwidth='337'><p data-renderer-start-pos='12571'>Configure a second Atlassian app within Azure so that you have one for your SAML single sign-on configuration and one for user provisioning.</p></td><td rowspan='1' colSpan='1' data-colwidth='80'><p data-renderer-start-pos='12715'>No</p></td></tr><tr><td rowspan='1' colSpan='1' data-colwidth='180'><p data-renderer-start-pos='12723'>A user's updated email address can't sync because another user (either from the identity provider or not) already has that email address.</p></td><td rowspan='1' colSpan='1' data-colwidth='337'><p data-renderer-start-pos='12864'>You can either:</p><ul class='ak-ul'><li><p data-renderer-start-pos='12881'>Delete the other user.</p></li><li><p data-renderer-start-pos='12907'>Change the email address of the other user to a different email address.</p></li></ul></td><td rowspan='1' colSpan='1' data-colwidth='80'><p data-renderer-start-pos='12987'>Yes</p></td></tr><tr><td rowspan='1' colSpan='1' data-colwidth='180'><p data-renderer-start-pos='12996'>If you have a group name with the same name as an Atlassian built-in group, you won’t be able to sync the group to your organization from your identity provider.</p><p data-renderer-start-pos='13159'><strong>Built-in groups</strong></p><ol class='ak-ol'><li><p data-renderer-start-pos='13176'>atlassian-addons</p></li><li><p data-renderer-start-pos='13196'>atlassian-addons-admin</p></li><li><p data-renderer-start-pos='13222'>site-admins</p></li><li><p data-renderer-start-pos='13237'>org-admins</p></li><li><p data-renderer-start-pos='13251'>administrators</p></li><li><p data-renderer-start-pos='13269'>system-administrators</p></li></ol></td><td rowspan='1' colSpan='1' data-colwidth='337'><p data-renderer-start-pos='13298'>Go to your identity provider and rename the conflicting group with a name that is different from an Atlassian built-in group name and try syncing again.</p><p data-renderer-start-pos='13452'> </p></td><td rowspan='1' colSpan='1' data-colwidth='80'><p data-renderer-start-pos='13456'>No</p></td></tr></tbody></table></div></div><p data-renderer-start-pos='13466'>We won’t update the listed user attributes in the Atlassian product for users outside of your domain. You will need to manually update them in the Atlassian product.</p></div></div></div></div>","cacLastModifiedContent":null,"collectionId":"5o3qaiN9ECDNauaGXqxs0B","collections":[{"id":"5o3qaiN9ECDNauaGXqxs0B","pageType":"Documentation","title":"Provision and sync users from an identity provider","description":"Make changes in your identity provider to users and groups and sync them to your Atlassian organization.","url":"/provisioning-users/docs/provision-and-sync-users-from-an-identity-provider/"},{"id":"32i0QwnuGtZ9VQ23iB7H6s","pageType":"Documentation","title":"Provision and sync users from Google Workspace","description":"Connect, manage, sync, and deactivate Google Workspace user accounts for your Atlassian organization.","url":"/provisioning-users/docs/provision-and-sync-users-from-g-suite/"},{"id":"3dS5y7v0wYzw7MGufsXLUL","pageType":"Documentation","title":"Connect identity providers to your organization","description":"Connect identity providers to manage and secure users.","url":"/provisioning-users/docs/connect-identity-providers-to-your-organization/"},{"id":"43M4H3lEPfkWsIlYZZYhhZ","pageType":"Documentation","title":" Provision and sync users from Microsoft Azure AD","description":"Connect, manage, and sync Microsoft Azure AD groups and users to your Atlassian organization.","url":"/provisioning-users/docs/provision-and-sync-users-from-microsoft-azure-ad/"}],"confluencePageId":null,"context":{"id":"coO8c7LypRMze4rajkC2I","type":"contextTheme","docsHomeSlug":"/provisioning-users/resources/","icon":{},"deployment":"Not Applicable","hubName":"Provisioning users"},"isCACContent":false,"pageType":"Documentation","relatedAppReferences":[],"tableOfContents":[{"title":"Supported identity providers","id":"Supported-identity-providers"},{"title":"Available attributes for mapping","id":"Available-attributes-for-mapping"},{"title":"Supported products","id":"Supported-products"},{"title":"How user provisioning works","id":"How-user-provisioning-works"},{"title":"Allowed number of groups and users","id":"Allowed-number-of-groups-and-users"},{"title":"Users and groups sync from your identity provider to your organization","id":"Users-and-groups-sync-from-your-identity-provider-to-your-organization"},{"title":"Your organization’s directory syncs to all associated sites","id":"Your-organization’s-directory-syncs-to-all-associated-sites"},{"title":"Groups get assigned to products","id":"Groups-get-assigned-to-products"},{"title":"User provisioning features","id":"User-provisioning-features"},{"title":"Manage group names","id":"Manage-group-names"},{"title":"Resolve group conflicts","id":"Resolve-group-conflicts"},{"title":"Supported user account operations","id":"Supported-user-account-operations"},{"title":"Supported group operations","id":"Supported-group-operations"},{"title":"Troubleshooting","id":"Troubleshooting"}],"url":"/provisioning-users/docs/understand-user-provisioning/","versions":[],"bodyRenderedAdf":"<div class=\"adf__content\"><div style=\"position:absolute;left:-9999px;width:1px;height:1px;overflow:hidden\"></div><div style=\"position:absolute;height:0;width:100%\"><object data=\"about:blank\" type=\"text/html\" style=\"position:absolute;height:0;width:100%\" aria-hidden=\"true\" tabindex=\"-1\"></object></div><div class=\"ak-renderer-wrapper sc-dymIpo gEdAYa\"><div></div><div class=\"sc-kXeGPI fIPKnQ\"><div class=\"ak-renderer-document\"><p data-renderer-start-pos=\"0\">We support user provisioning using the System for Cross-domain Identity Management (SCIM), and this feature uses the SCIM 2.0 version of the protocol.</p><p data-renderer-start-pos=\"152\">User provisioning integrates an external user directory with your Atlassian organization. This integration allows you to automatically update the users and groups in your Atlassian organization when you make updates in your identity provider. For example, with user provisioning, you can create, link, and deactivate managed Atlassian user accounts from your identity provider.</p><div class=\"pm-table-container \" data-layout=\"default\" style=\"width:inherit\"><div class=\"pm-table-wrapper\"><table data-number-column=\"false\"><tbody><tr><td rowspan=\"1\" colSpan=\"1\"><p data-renderer-start-pos=\"531\"><span><span class=\"text-fragment\" data-testid=\"inline-text-fragment\"><span><span><span><span role='presentation'><span class='icon-extension' data-testid='icon' style='white-space:normal'><span class='Icon__IconWrapper-dyhwwi-0 dqqHMN'><svg width='24' height='24' viewBox='0 0 24 24' focusable='false' role='presentation'><g fill='currentColor' fill-rule='evenodd'><path d='M6 14c0-1.105.902-2 2.009-2h7.982c1.11 0 2.009.894 2.009 2.006v4.44c0 3.405-12 3.405-12 0V14z'></path><circle cx='12' cy='7' r='4'></circle></g></svg></span></span></span></span></span><strong>Who can do this?</strong></span></span></span><br/><strong>Role:</strong> <span><span class=\"text-fragment\" data-testid=\"inline-text-fragment\"><span>Organization admin</span></span></span><br/><strong>Plan:</strong> <span><span class=\"text-fragment\" data-testid=\"inline-text-fragment\"><span><span><a href='https://support.atlassian.com/security-and-access-policies/docs/understand-atlassian-guard/' data-testid='sac-link-extension' target='_blank' rel='noopener noreferrer'>Atlassian Guard Standard</a></span></span></span></span></p></td></tr></tbody></table></div></div><h2 id=\"Supported-identity-providers\">Supported identity providers</h2><p data-renderer-start-pos=\"586\">You can use the identity provider of your choice, but some capabilities are only available with selected identity providers. <span><a href=\"https://support.atlassian.com/provisioning-users/docs/supported-identity-providers/\" data-testid=\"sac-link-extension\" target=\"_blank\" rel=\"noopener noreferrer\">Learn which identity providers we support</a></span> </p><p data-renderer-start-pos=\"716\">The steps involved to set up user provisioning will differ depending on the identity provider you use. Here are setup instructions for some of the commonly used identity providers:</p><ul class=\"ak-ul\"><li><p data-renderer-start-pos=\"898\">Okta: <span><a href=\"https://support.atlassian.com/provisioning-users/docs/configure-user-provisioning-with-okta/\" data-testid=\"sac-link-extension\" target=\"_blank\" rel=\"noopener noreferrer\">Learn how to configure user provisioning with Okta</a></span> </p></li><li><p data-renderer-start-pos=\"910\">OneLogin: <a class=\"sc-eIHaNI fVLHZh\" href=\"https://onelogin.service-now.com/support?id=kb_article&sys_id=05501489db792708ca1c400e0b9619ea\" title=\"https://onelogin.service-now.com/support?id=kb_article&sys_id=05501489db792708ca1c400e0b9619ea\">Learn how to configure user provisioning for OneLogin</a></p></li><li><p data-renderer-start-pos=\"977\">Azure AD: <a class=\"sc-eIHaNI fVLHZh\" href=\"https://docs.microsoft.com/en-us/azure/active-directory/saas-apps/atlassian-cloud-provisioning-tutorial\" title=\"https://docs.microsoft.com/en-us/azure/active-directory/saas-apps/atlassian-cloud-provisioning-tutorial\">Learn how to configure user provisioning for Azure AD</a></p></li><li><p data-renderer-start-pos=\"1044\">Google Cloud:<span><a href=\"https://support.atlassian.com/provisioning-users/docs/configure-user-provisioning-with-google-cloud/\" data-testid=\"sac-link-extension\" target=\"_blank\" rel=\"noopener noreferrer\">Configure user provisioning with Google Cloud</a></span> </p></li><li><p data-renderer-start-pos=\"1063\">Google Workspace: <a class=\"sc-eIHaNI fVLHZh\" href=\"https://support.atlassian.com/provisioning-users/docs/connect-to-g-suite/\" title=\"https://support.atlassian.com/provisioning-users/docs/connect-to-g-suite/\">Learn how to set up user provisioning for Google Workspace </a></p></li><li><p data-renderer-start-pos=\"1144\">PingFederate: <a class=\"sc-eIHaNI fVLHZh\" href=\"https://docs.pingidentity.com/r/en-us/pingfederate-atlassian-cloud-connector\" title=\"https://docs.pingidentity.com/r/en-us/pingfederate-atlassian-cloud-connector\">Learn how to configure user provisioning for PingFederate</a></p></li><li><p data-renderer-start-pos=\"1219\">JumpCloud: <a class=\"sc-eIHaNI fVLHZh\" href=\"https://support.jumpcloud.com/support/s/article/Identity-Management-with-Atlassian-Cloud\" title=\"https://support.jumpcloud.com/support/s/article/Identity-Management-with-Atlassian-Cloud\">Learn how to configure user provisioning for JumpCloud</a></p></li></ul><p data-renderer-start-pos=\"1290\">If you want to use an identity provider that isn’t supported, you can use the <a class=\"sc-eIHaNI fVLHZh\" href=\"https://developer.atlassian.com/cloud/admin/user-provisioning/rest\" title=\"https://developer.atlassian.com/cloud/admin/user-provisioning/rest\">user provisioning API</a> to create your own integration that allows you to manage users and groups.</p><p data-renderer-start-pos=\"1466\">Before you configure user provisioning, you’ll need to add your identity provider to your Atlassian organization. <span><a href=\"https://support.atlassian.com/provisioning-users/docs/choose-your-identity-provider/\" data-testid=\"sac-link-extension\" target=\"_blank\" rel=\"noopener noreferrer\">Learn how to add an identity provider </a></span> </p><h2 id=\"Available-attributes-for-mapping\">Available attributes for mapping</h2><p data-renderer-start-pos=\"1619\">This is the attribute mapping between an identity provider and your Atlassian organization.</p><div class=\"pm-table-container \" data-layout=\"default\" style=\"width:inherit\"><div class=\"pm-table-wrapper\"><table data-number-column=\"false\"><tbody><tr><th rowspan=\"1\" colSpan=\"1\" style=\"background-color:var(--ds-background-neutral, #F4F5F7)\"><p data-renderer-start-pos=\"1712\"><strong>SCIM attribute</strong></p></th><th rowspan=\"1\" colSpan=\"1\" style=\"background-color:var(--ds-background-neutral, #F4F5F7)\"><p data-renderer-start-pos=\"1730\"><strong>AtlassianCloud attribute</strong></p></th></tr><tr><td rowspan=\"1\" colSpan=\"1\"><p data-renderer-start-pos=\"1760\">nickName</p></td><td rowspan=\"1\" colSpan=\"1\"><p data-renderer-start-pos=\"1772\">Publicname</p></td></tr></tbody></table></div></div><p data-renderer-start-pos=\"1790\">The way you map attributes changes depending on your identity provider. Check out the step-by-step instructions for Okta, OneLogin, and Microsoft Azure AD.<br/><a class=\"sc-eIHaNI fVLHZh\" href=\"https://support.atlassian.com/provisioning-users/docs/sync-user-attributes-to-your-organization/\" title=\"https://support.atlassian.com/provisioning-users/docs/sync-user-attributes-to-your-organization/\">Learn how to map attributes</a></p><h2 id=\"Supported-products\">Supported products</h2><p data-renderer-start-pos=\"1995\">Provisioning is available for all Atlassian accounts, which means that you can create, update, and deactivate accounts from your identity provider. Syncing groups is only currently available for Jira product instances, Confluence, Trello and not yet available for Bitbucket.</p><p data-renderer-start-pos=\"2271\">When a Trello Enterprise is linked to an Atlassian organization, any users who were already provisioned to the organization via SCIM, as well as any users provisioned this way going forward, will have a free Trello account provisioned. The account will be managed by the Trello Enterprise but will not have an Enterprise license unless granted one by an admin.</p><h2 id=\"How-user-provisioning-works\">How user provisioning works</h2><p data-renderer-start-pos=\"2662\">After you connect your identity provider to your organization, your users and groups sync to your organization and sites, making them available for granting product access. This diagram illustrates how users and groups sync once you set up user provisioning.</p><div class=\"ak-renderer-extension \" style=\"width:100%\" data-layout=\"default\"><div class=\"ak-renderer-extension-overflow-container\"><div style=\"text-align:center\"><img style=\"max-width:100%;border:2px inset rgba(9,30,66,0.08);-webkit-border-radius:3px;-moz-border-radius:3px;border-radius:3px\" src=\"//images.ctfassets.net/zsv3d0ugroxu/fz3yfJt59O10E0j2Yd442/2903b536866e350bf6a0c490956e05df/diagram_UserProvisioningOverview\" alt=\"Diagram of identity provider connecting to your organization - your users and groups sync to your organization and sites\"/></div></div></div><p data-renderer-start-pos=\"2923\">The next few sections break down how the synchronization works:</p><ul class=\"ak-ul\"><li><p data-renderer-start-pos=\"2988\">Allowed number of groups and users</p></li><li><p data-renderer-start-pos=\"3026\">Users and groups sync from your identity provider to your organization</p></li><li><p data-renderer-start-pos=\"3100\">Your organization’s directory syncs to all associated sites</p></li><li><p data-renderer-start-pos=\"3163\">Groups get assigned to products</p></li></ul><p data-renderer-start-pos=\"3200\"><a class=\"sc-eIHaNI fVLHZh\" href=\"https://youtu.be/7EQhYz-vApw\" title=\"https://youtu.be/7EQhYz-vApw\">Learn more about user provisioning in this video</a></p><h3 id=\"Allowed-number-of-groups-and-users\">Allowed number of groups and users</h3><p data-renderer-start-pos=\"3286\">A large number of groups and users can take a while to sync to an Atlassian organization. These are the limits for how many groups you can sync.</p><p data-renderer-start-pos=\"3432\">You can only sync up to:</p><ul class=\"ak-ul\"><li><p data-renderer-start-pos=\"3458\">300,000 users per organization</p></li><li><p data-renderer-start-pos=\"3492\">150,000 users per group. </p></li><li><p data-renderer-start-pos=\"3522\">200,000 groups per identity provider directory. To add more groups,<a class=\"sc-eIHaNI fVLHZh\" href=\"https://support.atlassian.com/contact/#/\" title=\"https://support.atlassian.com/contact/#/\"> contact customer support</a>.</p></li></ul><h3 id=\"Users-and-groups-sync-from-your-identity-provider-to-your-organization\">Users and groups sync from your identity provider to your organization</h3><p data-renderer-start-pos=\"3693\">When you set up user provisioning, you create a directory for your users. All users and groups in your identity provider from your verified domain(s) or from outside your verified domain(s) sync to your organization's directory, as shown in the diagram.</p><p data-renderer-start-pos=\"3948\">You create the groups to provision to your identity provider directory. For some organizations, you continue to see a group we create called <strong>All members for directory - <</strong><em><strong>directory_id</strong></em><strong>></strong>, and add all users to.</p><p data-renderer-start-pos=\"4156\">If you use Google Workspace, you will see a group we created called All users for Google Workspace.</p><div class=\"ak-renderer-extension \" style=\"width:100%\" data-layout=\"default\"><div class=\"ak-renderer-extension-overflow-container\"><div style=\"text-align:center\"><img style=\"max-width:100%;border:2px inset rgba(9,30,66,0.08);-webkit-border-radius:3px;-moz-border-radius:3px;border-radius:3px\" src=\"//images.ctfassets.net/zsv3d0ugroxu/2uV6bXipBgeWxXaSTRewAq/1f9820608825ce406fde77e6b530b875/diagram_UserProvisioning1\" alt=\"Diagram of identity provider for different groups syncing with your organization\"/></div></div></div><p data-renderer-start-pos=\"4258\">After you connect your identity provider to your Atlassian organization, synced directory groups appear in your Atlassian organization and you're unable to make changes to a user's account from the organization.</p><p data-renderer-start-pos=\"4471\">If your Atlassian organization already has existing users from a <strong>verified domain</strong>:</p><ul class=\"ak-ul\"><li><p data-renderer-start-pos=\"4554\"><em>And the identity provider has a user with the same email address as a user in your organization</em>, we create a link between both user accounts. You can only make changes to the user's account from your identity provider.<br/><br/></p></li><li><p data-renderer-start-pos=\"4777\"><em>And the identity provider doesn't have a user with the same email address as a user in your organization</em>, the user's access remains the same and you can still manage that user from your Atlassian organization.</p></li></ul><p data-renderer-start-pos=\"4992\">If your Atlassian organization already has existing users from an <strong>unverified domain</strong>:</p><ul class=\"ak-ul\"><li><p data-renderer-start-pos=\"5078\"><em>And the identity provider has a user with the same email address in your organization</em>, we create a link between both user accounts. You can only make changes to the user’s account from your identity provider.</p><p data-renderer-start-pos=\"5288\"><br/>You may want to avoid syncing an existing user from an unverified domain. The user may get access to content in your organization or product access, based on how you set up groups to sync from your identity provider. <br/><br/>We recommend you verify the domain for these users to control access to your organization’s content and access to Atlassian products. <a class=\"sc-eIHaNI fVLHZh\" href=\"https://support.atlassian.com/user-management/docs/verify-a-domain-to-manage-accounts/\" title=\"https://support.atlassian.com/user-management/docs/verify-a-domain-to-manage-accounts/\">How to verify a domain</a></p></li></ul><div style=\"background:#DEEBFF\" class=\"ak-editor-panel\" data-panel-type=\"info\"><span style=\"color:#0052CC\" class=\"ak-editor-panel__icon\"><span class=\"sc-bnXvFD jjYaPd\" role=\"img\" aria-label=\"Panel info\"><svg width=\"24\" height=\"24\" viewBox=\"0 0 24 24\" focusable=\"false\" role=\"presentation\"><path d=\"M12 20a8 8 0 1 1 0-16 8 8 0 0 1 0 16zm0-8.5a1 1 0 0 0-1 1V15a1 1 0 0 0 2 0v-2.5a1 1 0 0 0-1-1zm0-1.125a1.375 1.375 0 1 0 0-2.75 1.375 1.375 0 0 0 0 2.75z\" fill=\"currentColor\" fill-rule=\"evenodd\"/></svg></span></span><div class=\"ak-editor-panel__content\"><p data-renderer-start-pos=\"5670\">Syncing more than 500 groups will take a significant amount of time. Be prepared to wait a while for the sync to complete. </p></div></div><h3 id=\"Your-organization’s-directory-syncs-to-all-associated-sites\">Your organization’s directory syncs to all associated sites</h3><p data-renderer-start-pos=\"5858\">Any sites you've added to your organization now have access to your provisioned users and groups, as shown in the diagram. Synced directory groups will appear along the default and native groups in your sites.</p><div class=\"ak-renderer-extension \" style=\"width:100%\" data-layout=\"default\"><div class=\"ak-renderer-extension-overflow-container\"><div style=\"text-align:center\"><img style=\"max-width:100%;border:2px inset rgba(9,30,66,0.08);-webkit-border-radius:3px;-moz-border-radius:3px;border-radius:3px\" src=\"//images.ctfassets.net/zsv3d0ugroxu/5Y3X15svPAwe6GmAvvUaFX/2172155ffed774492407cfe822f3a172/diagram_UserProvisioning2\" alt=\"Diagram of your organization’s directory syncing to all associated sites\"/></div></div></div><h3 id=\"Groups-get-assigned-to-products\">Groups get assigned to products</h3><p data-renderer-start-pos=\"6103\">You can start granting users product access by assigning groups to your site's products.</p><div class=\"ak-renderer-extension \" style=\"width:100%\" data-layout=\"default\"><div class=\"ak-renderer-extension-overflow-container\"><div style=\"text-align:center\"><img style=\"max-width:100%;border:2px inset rgba(9,30,66,0.08);-webkit-border-radius:3px;-moz-border-radius:3px;border-radius:3px\" src=\"//images.ctfassets.net/zsv3d0ugroxu/5JGEd8XRTU7GzkTuyVasSy/ed438723a1cc86d2c18b5c76acf5e965/diagram_UserProvisioning3.png\" alt=\"Diagram of cloud sites getting assigned to Jira Software an to Confluence \"/></div></div></div><p data-renderer-start-pos=\"6194\">When users have product access, Jira and Confluence admins can update product permissions for those users from the Jira and Confluence settings. See <span><a href=\"https://support.atlassian.com/jira-cloud-administration/docs/manage-global-permissions/\" data-testid=\"sac-link-extension\" target=\"_blank\" rel=\"noopener noreferrer\">Manage global permissions</a></span> for administering Jira permissions and <span><a href=\"https://support.atlassian.com/confluence-cloud/docs/manage-site-level-permissions/\" data-testid=\"sac-link-extension\" target=\"_blank\" rel=\"noopener noreferrer\">Manage global permissions in Confluence administration</a></span> for administering Confluence permissions.</p><h2 id=\"User-provisioning-features\">User provisioning features</h2><p data-renderer-start-pos=\"6457\">Once you connect your identity provider to your Atlassian organization, you manage all user attributes and group memberships from your identity provider. If you want to manage users from your Atlassian organization, disable the connection with your identity provider.</p><div style=\"background:#DEEBFF\" class=\"ak-editor-panel\" data-panel-type=\"info\"><span style=\"color:#0052CC\" class=\"ak-editor-panel__icon\"><span class=\"sc-bnXvFD jjYaPd\" role=\"img\" aria-label=\"Panel info\"><svg width=\"24\" height=\"24\" viewBox=\"0 0 24 24\" focusable=\"false\" role=\"presentation\"><path d=\"M12 20a8 8 0 1 1 0-16 8 8 0 0 1 0 16zm0-8.5a1 1 0 0 0-1 1V15a1 1 0 0 0 2 0v-2.5a1 1 0 0 0-1-1zm0-1.125a1.375 1.375 0 1 0 0-2.75 1.375 1.375 0 0 0 0 2.75z\" fill=\"currentColor\" fill-rule=\"evenodd\"/></svg></span></span><div class=\"ak-editor-panel__content\"><h3 id=\"Manage-group-names\">Manage group names</h3><ul class=\"ak-ul\"><li><p data-renderer-start-pos=\"6746\"><em>Rename groups after they've synced to your Atlassian organization</em>. You’ll need to create a new group with the desired name, update its membership, and delete the old group.</p></li></ul><h3 id=\"Resolve-group-conflicts\">Resolve group conflicts</h3><ul class=\"ak-ul\"><li><p data-renderer-start-pos=\"6949\"><em>Review group names before they’ve synced to your Atlassian organization. </em>You’ll need to rename groups with the same name in your identity provider and Atlassian organization. <span><a href=\"https://support.atlassian.com/provisioning-users/docs/resolve-group-conflicts-when-syncing-users/\" data-testid=\"sac-link-extension\" target=\"_blank\" rel=\"noopener noreferrer\">Learn how to resolve group conflicts when syncing users</a></span> </p></li></ul></div></div><h3 id=\"Supported-user-account-operations\">Supported user account operations</h3><p data-renderer-start-pos=\"7169\">When you perform these user management operations from your identity provider, your updates will sync with your Atlassian organization.</p><p data-renderer-start-pos=\"7306\">We sync user accounts from your identity provider to your Atlassian organization when they have email addresses from your verified domain(s) and from outside your verified domain(s). </p><div class=\"pm-table-container \" data-layout=\"default\" style=\"width:inherit\"><div class=\"pm-table-wrapper\"><table data-number-column=\"false\"><colgroup><col style=\"width:102px\"/><col style=\"width:405px\"/></colgroup><tbody><tr><th rowspan=\"1\" colSpan=\"1\" data-colwidth=\"121\"><p data-renderer-start-pos=\"7491\"><strong>Operations</strong></p></th><th rowspan=\"1\" colSpan=\"1\" data-colwidth=\"477\"><p data-renderer-start-pos=\"7505\"><strong>Notes</strong></p></th></tr><tr><td rowspan=\"1\" colSpan=\"1\" data-colwidth=\"121\"><p data-renderer-start-pos=\"7516\">Create a new user account</p></td><td rowspan=\"1\" colSpan=\"1\" data-colwidth=\"477\"><p data-renderer-start-pos=\"7545\">A user account gets created when it has an email address from your verified domain(s) or from outside your verified domain(s).</p></td></tr><tr><td rowspan=\"1\" colSpan=\"1\" data-colwidth=\"121\"><p data-renderer-start-pos=\"7677\">Link an existing user account</p></td><td rowspan=\"1\" colSpan=\"1\" data-colwidth=\"477\"><p data-renderer-start-pos=\"7710\">If an Atlassian account already exists on the Atlassian platform, we'll automatically link the user in your identity provider to the user in your Atlassian organization.</p></td></tr><tr><td rowspan=\"1\" colSpan=\"1\" data-colwidth=\"121\"><p data-renderer-start-pos=\"7885\">Update a user's account details</p></td><td rowspan=\"1\" colSpan=\"1\" data-colwidth=\"477\"><p data-renderer-start-pos=\"7920\">You can update these user attributes from your identity provider:</p><ul class=\"ak-ul\"><li><p data-renderer-start-pos=\"7987\">Display name: This is a combination of a user’s first and last name. If you update the display name it also overwrites the attributes for first and last name.</p></li><li><p data-renderer-start-pos=\"8149\">Email address</p></li><li><p data-renderer-start-pos=\"8166\">Organization</p></li><li><p data-renderer-start-pos=\"8182\">Job title</p></li><li><p data-renderer-start-pos=\"8195\">Timezone</p></li><li><p data-renderer-start-pos=\"8207\">Department</p></li><li><p data-renderer-start-pos=\"8221\">Preferred language</p></li></ul><div style=\"background:#FFFAE6\" class=\"ak-editor-panel\" data-panel-type=\"warning\"><span style=\"color:#FF991F\" class=\"ak-editor-panel__icon\"><span class=\"sc-bnXvFD jjYaPd\" role=\"img\" aria-label=\"Panel warning\"><svg width=\"24\" height=\"24\" viewBox=\"0 0 24 24\" focusable=\"false\" role=\"presentation\"><g fill-rule=\"evenodd\"><path d=\"M12.938 4.967c-.518-.978-1.36-.974-1.876 0L3.938 18.425c-.518.978-.045 1.771 1.057 1.771h14.01c1.102 0 1.573-.797 1.057-1.771L12.938 4.967z\" fill=\"currentColor\"/><path d=\"M12 15a1 1 0 0 1-1-1V9a1 1 0 0 1 2 0v5a1 1 0 0 1-1 1m0 3a1 1 0 0 1 0-2 1 1 0 0 1 0 2\" fill=\"inherit\"/></g></svg></span></span><div class=\"ak-editor-panel__content\"><p data-renderer-start-pos=\"8245\">When you update an email address from a verified or unverified domain to an unverified domain it:</p><ul class=\"ak-ul\"><li><p data-renderer-start-pos=\"8344\">Removes the user from groups provisioned by SCIM</p></li><li><p data-renderer-start-pos=\"8396\">May cause the user to lose product access granted in the SCIM group</p></li></ul><p data-renderer-start-pos=\"8469\">To make sure users aren’t removed from product access groups, <span><a href=\"https://support.atlassian.com/user-management/docs/verify-a-domain-to-manage-accounts/\" data-testid=\"sac-link-extension\" target=\"_blank\" rel=\"noopener noreferrer\">verify a domain</a></span> in your Atlassian organization first.</p></div></div><div style=\"background:#DEEBFF\" class=\"ak-editor-panel\" data-panel-type=\"info\"><span style=\"color:#0052CC\" class=\"ak-editor-panel__icon\"><span class=\"sc-bnXvFD jjYaPd\" role=\"img\" aria-label=\"Panel info\"><svg width=\"24\" height=\"24\" viewBox=\"0 0 24 24\" focusable=\"false\" role=\"presentation\"><path d=\"M12 20a8 8 0 1 1 0-16 8 8 0 0 1 0 16zm0-8.5a1 1 0 0 0-1 1V15a1 1 0 0 0 2 0v-2.5a1 1 0 0 0-1-1zm0-1.125a1.375 1.375 0 1 0 0-2.75 1.375 1.375 0 0 0 0 2.75z\" fill=\"currentColor\" fill-rule=\"evenodd\"/></svg></span></span><div class=\"ak-editor-panel__content\"><p data-renderer-start-pos=\"8574\">About attributes for users outside of your verified domain</p><p data-renderer-start-pos=\"8634\">Users from outside your verified domain aren't managed accounts. When you update attributes in your identity provider for these users, we won't sync the updates.</p></div></div></td></tr><tr><td rowspan=\"1\" colSpan=\"1\" data-colwidth=\"121\"><p data-renderer-start-pos=\"8803\">Activate a user account</p></td><td rowspan=\"1\" colSpan=\"1\" data-colwidth=\"477\"><p data-renderer-start-pos=\"8830\">You can activate a user's Atlassian account from your identity provider.</p></td></tr><tr><td rowspan=\"1\" colSpan=\"1\" data-colwidth=\"121\"><p data-renderer-start-pos=\"8908\">Deactivate a user account</p></td><td rowspan=\"1\" colSpan=\"1\" data-colwidth=\"477\"><p data-renderer-start-pos=\"8937\">You can deactivate the Atlassian account for users from your verified domain in the identity provider.</p><p data-renderer-start-pos=\"9041\">When you deactivate users <strong>outside</strong> your verified domain:</p><ul class=\"ak-ul\"><li><p data-renderer-start-pos=\"9098\">User is removed from group provisioned by SCIM</p></li><li><p data-renderer-start-pos=\"9148\">User could lose product access granted in the SCIM group</p></li><li><p data-renderer-start-pos=\"9208\">User has Atlassian site access</p></li></ul><p data-renderer-start-pos=\"9244\">To remove site access after deactivation, you can remove the user from the site.</p></td></tr><tr><td rowspan=\"1\" colSpan=\"1\" data-colwidth=\"121\"><p data-renderer-start-pos=\"9330\">Delete a user account</p></td><td rowspan=\"1\" colSpan=\"1\" data-colwidth=\"477\"><p data-renderer-start-pos=\"9355\">We recommend you deactivate a user's account in your identity provider before you delete a user account.</p><p data-renderer-start-pos=\"9461\">To delete a user's Atlassian account from your verified domain, delete the user from the Atlassian directory in your organization.<br/><br/></p><div style=\"background:#DEEBFF\" class=\"ak-editor-panel\" data-panel-type=\"info\"><span style=\"color:#0052CC\" class=\"ak-editor-panel__icon\"><span class=\"sc-bnXvFD jjYaPd\" role=\"img\" aria-label=\"Panel info\"><svg width=\"24\" height=\"24\" viewBox=\"0 0 24 24\" focusable=\"false\" role=\"presentation\"><path d=\"M12 20a8 8 0 1 1 0-16 8 8 0 0 1 0 16zm0-8.5a1 1 0 0 0-1 1V15a1 1 0 0 0 2 0v-2.5a1 1 0 0 0-1-1zm0-1.125a1.375 1.375 0 1 0 0-2.75 1.375 1.375 0 0 0 0 2.75z\" fill=\"currentColor\" fill-rule=\"evenodd\"/></svg></span></span><div class=\"ak-editor-panel__content\"><p data-renderer-start-pos=\"9594\">Unable to delete user account for users outside your verified domain</p><p data-renderer-start-pos=\"9664\">When you delete a user from your identity provider, we deactivate the user account. To learn what happens when we deactivate, view the “deactivate a user account” section.</p></div></div></td></tr></tbody></table></div></div><h3 id=\"Supported-group-operations\">Supported group operations</h3><p data-renderer-start-pos=\"9873\">Use groups to manage admin permissions and product access (new licenses) from your identity provider and these updates will sync with your Atlassian organization.</p><p data-renderer-start-pos=\"10037\">Any group that is marked as a default group can't be managed via SCIM integration. You can only manage groups synced from your identity provider directory via SCIM.</p><div class=\"pm-table-container \" data-layout=\"default\" style=\"width:inherit\"><div class=\"pm-table-wrapper\"><table data-number-column=\"false\"><colgroup><col style=\"width:104px\"/><col style=\"width:403px\"/></colgroup><tbody><tr><th rowspan=\"1\" colSpan=\"1\" data-colwidth=\"123\"><p data-renderer-start-pos=\"10203\"><strong>Operations</strong></p></th><th rowspan=\"1\" colSpan=\"1\" data-colwidth=\"475\"><p data-renderer-start-pos=\"10217\"><strong>Notes</strong></p></th></tr><tr><td rowspan=\"1\" colSpan=\"1\" data-colwidth=\"123\"><p data-renderer-start-pos=\"10228\">Create a group</p></td><td rowspan=\"1\" colSpan=\"1\" data-colwidth=\"475\"><p data-renderer-start-pos=\"10246\">The group gets created as a read-only group in the organization's directory. You can only edit groups from your identity provider. Give the new group a name that doesn't already exist your organization.</p></td></tr><tr><td rowspan=\"1\" colSpan=\"1\" data-colwidth=\"123\"><p data-renderer-start-pos=\"10454\">Delete a group</p></td><td rowspan=\"1\" colSpan=\"1\" data-colwidth=\"475\"><p data-renderer-start-pos=\"10472\">Delete a group from your identity provider to remove the group from your organization's directory.</p></td></tr><tr><td rowspan=\"1\" colSpan=\"1\" data-colwidth=\"123\"><p data-renderer-start-pos=\"10576\">Push an existing group</p></td><td rowspan=\"1\" colSpan=\"1\" data-colwidth=\"475\"><p data-renderer-start-pos=\"10602\">If you try to push a group from your identity provider that has the same name as a group in your organization, you'll get an error.</p></td></tr><tr><td rowspan=\"1\" colSpan=\"1\" data-colwidth=\"123\"><p data-renderer-start-pos=\"10739\">Update group membership</p></td><td rowspan=\"1\" colSpan=\"1\" data-colwidth=\"475\"><p data-renderer-start-pos=\"10766\">You can update groups from your identity provider to configure product access, admin privileges, or application-specific settings, such as Confluence space permissions.</p></td></tr></tbody></table></div></div><h3 id=\"Troubleshooting\">Troubleshooting</h3><p data-renderer-start-pos=\"10959\">When troubleshooting issues with syncing users and groups, check the <strong>Troubleshooting log</strong> on the <strong>User provisioning </strong>page of your Atlassian organization.</p><div class=\"pm-table-container \" data-layout=\"default\" style=\"width:inherit\"><div class=\"pm-table-wrapper\"><table data-number-column=\"false\"><colgroup><col style=\"width:153px\"/><col style=\"width:286px\"/><col style=\"width:68px\"/></colgroup><tbody><tr><th rowspan=\"1\" colSpan=\"1\" data-colwidth=\"180\"><p data-renderer-start-pos=\"11111\"><strong>Problem</strong></p></th><th rowspan=\"1\" colSpan=\"1\" data-colwidth=\"337\"><p data-renderer-start-pos=\"11122\"><strong>Workaround / troubleshooting tips</strong></p></th><th rowspan=\"1\" colSpan=\"1\" data-colwidth=\"80\"><p data-renderer-start-pos=\"11159\"><strong>Recorded in log</strong></p></th></tr><tr><td rowspan=\"1\" colSpan=\"1\" data-colwidth=\"180\"><p data-renderer-start-pos=\"11180\">A group has successfully synced, but the group is empty and doesn't include any synced users.</p></td><td rowspan=\"1\" colSpan=\"1\" data-colwidth=\"337\"><p data-renderer-start-pos=\"11277\">When pushing a group, make sure that the synchronized group does not have the same name as a default group (e.g. <em>org-admins</em> or <em>site-admins</em>) or a manually created group.</p></td><td rowspan=\"1\" colSpan=\"1\" data-colwidth=\"80\"><p data-renderer-start-pos=\"11449\">Yes</p></td></tr><tr><td rowspan=\"1\" colSpan=\"1\" data-colwidth=\"180\"><p data-renderer-start-pos=\"11458\">A group synced successfully, but you don't see it in the site admin area and can't find it on the <strong>Product access</strong> page.</p></td><td rowspan=\"1\" colSpan=\"1\" data-colwidth=\"337\"><p data-renderer-start-pos=\"11580\">Make sure you added the site to your organization. To add the site, use the <strong>Add a site </strong>option from your Atlassian organization.</p></td><td rowspan=\"1\" colSpan=\"1\" data-colwidth=\"80\"><p data-renderer-start-pos=\"11711\">No</p></td></tr><tr><td rowspan=\"1\" colSpan=\"1\" data-colwidth=\"180\"><p data-renderer-start-pos=\"11719\">A user seems to be successfully synced, but the user account doesn't appear on the <strong>Managed accounts</strong> page.</p></td><td rowspan=\"1\" colSpan=\"1\" data-colwidth=\"337\"><p data-renderer-start-pos=\"11828\">Check that the user's email address is part of your verified domain. <br/><br/>If the user's account doesn't have an email address with your verified domain, you can navigate to <strong>Products</strong> > <strong>Users</strong> page to find the user account.</p></td><td rowspan=\"1\" colSpan=\"1\" data-colwidth=\"80\"><p data-renderer-start-pos=\"12049\">Yes</p></td></tr><tr><td rowspan=\"1\" colSpan=\"1\" data-colwidth=\"180\"><p data-renderer-start-pos=\"12058\">(If Okta is your identity provider) Users don't sync to the organization directory when they were already assigned to the Atlassian app before the user provisioning integration is complete.</p></td><td rowspan=\"1\" colSpan=\"1\" data-colwidth=\"337\"><p data-renderer-start-pos=\"12251\">To sync users correctly, reassign them from the <strong>Assignments</strong> tab. If a group contains the affected users, you can reassign the group instead.</p></td><td rowspan=\"1\" colSpan=\"1\" data-colwidth=\"80\"><p data-renderer-start-pos=\"12395\">No</p></td></tr><tr><td rowspan=\"1\" colSpan=\"1\" data-colwidth=\"180\"><p data-renderer-start-pos=\"12403\">(If Azure is your identity provider) Users don't sync to the organization directory and you're unable to troubleshoot with the error description from the Azure log.</p></td><td rowspan=\"1\" colSpan=\"1\" data-colwidth=\"337\"><p data-renderer-start-pos=\"12571\">Configure a second Atlassian app within Azure so that you have one for your SAML single sign-on configuration and one for user provisioning.</p></td><td rowspan=\"1\" colSpan=\"1\" data-colwidth=\"80\"><p data-renderer-start-pos=\"12715\">No</p></td></tr><tr><td rowspan=\"1\" colSpan=\"1\" data-colwidth=\"180\"><p data-renderer-start-pos=\"12723\">A user's updated email address can't sync because another user (either from the identity provider or not) already has that email address.</p></td><td rowspan=\"1\" colSpan=\"1\" data-colwidth=\"337\"><p data-renderer-start-pos=\"12864\">You can either:</p><ul class=\"ak-ul\"><li><p data-renderer-start-pos=\"12881\">Delete the other user.</p></li><li><p data-renderer-start-pos=\"12907\">Change the email address of the other user to a different email address.</p></li></ul></td><td rowspan=\"1\" colSpan=\"1\" data-colwidth=\"80\"><p data-renderer-start-pos=\"12987\">Yes</p></td></tr><tr><td rowspan=\"1\" colSpan=\"1\" data-colwidth=\"180\"><p data-renderer-start-pos=\"12996\">If you have a group name with the same name as an Atlassian built-in group, you won’t be able to sync the group to your organization from your identity provider.</p><p data-renderer-start-pos=\"13159\"><strong>Built-in groups</strong></p><ol class=\"ak-ol\"><li><p data-renderer-start-pos=\"13176\">atlassian-addons</p></li><li><p data-renderer-start-pos=\"13196\">atlassian-addons-admin</p></li><li><p data-renderer-start-pos=\"13222\">site-admins</p></li><li><p data-renderer-start-pos=\"13237\">org-admins</p></li><li><p data-renderer-start-pos=\"13251\">administrators</p></li><li><p data-renderer-start-pos=\"13269\">system-administrators</p></li></ol></td><td rowspan=\"1\" colSpan=\"1\" data-colwidth=\"337\"><p data-renderer-start-pos=\"13298\">Go to your identity provider and rename the conflicting group with a name that is different from an Atlassian built-in group name and try syncing again.</p><p data-renderer-start-pos=\"13452\"> </p></td><td rowspan=\"1\" colSpan=\"1\" data-colwidth=\"80\"><p data-renderer-start-pos=\"13456\">No</p></td></tr></tbody></table></div></div><p data-renderer-start-pos=\"13466\">We won’t update the listed user attributes in the Atlassian product for users outside of your domain. You will need to manually update them in the Atlassian product.</p></div></div></div></div>","metadata":{"id":"dyFjaGJmZa6WQ84OA84SU","type":"sitewideMetadata","publisher":"Atlassian","language":"en-US","license":"Except where otherwise noted, content in this space is licensed under a <a href=\"https://creativecommons.org/licenses/by/2.5/au/\">Creative Commons Attribution 2.5 Australia License</a>.","logo":"https://images.ctfassets.net/zsv3d0ugroxu/4usk6GCfTOCSKCwCQykYIu/34d7ed0904d9a0274fb906f86f51e1e1/Atlassian-vertical-blue-onecolor-rgb.svg","brand":"Atlassian","legalName":"Atlassian Corporation Plc","owns":"Jira Software,Jira Service Management,Jira Work Management,Jira Align,Confluence,Hipchat,Bitbucket,Bamboo,Crucible,Crowd,Sourcetree,OpsGenie,Statuspage,Trello,Halp,Mindville","siteName":"Atlassian Support"},"header":{"id":"3wZXajO6t2W8mUgA486Wai","type":"globalHeader","cloudProducts":[{"sys":{"id":"3yydXRuQ88gGCKOyYsAGaU"},"version":"Not Applicable","deployment":"Cloud","productBlurb":"Project and issue tracking","url":"jira-software-cloud","icon":{"url":"https://images.ctfassets.net/zsv3d0ugroxu/3tdm6nuuJrPlizPLgkWqZ5/d0a7942804abf2f8f6737197be1fc7f4/logo-light_Jira_mark_brand_RGB.svg"},"productNameReference":{"sys":{"id":"jirasoftware"},"productName":"Jira Software"},"deploymentUrls":{"cloud":"/jira-software-cloud/"},"id":"3yydXRuQ88gGCKOyYsAGaU"},{"sys":{"id":"1gXBh54v1sayA6w8yowM8u"},"version":"Not Applicable","deployment":"Cloud","productBlurb":"Service management and customer support","url":"jira-service-management-cloud","icon":{"url":"https://images.ctfassets.net/zsv3d0ugroxu/5DppKv8q5q206zQzIRDKQq/f31b8874021ee7d6dd54389f902b1421/logo-light_Jira-Service-Management_mark_brand_RGB.svg"},"productNameReference":{"sys":{"id":"jiraservicedesk"},"productName":"Jira Service Management"},"deploymentUrls":{"cloud":"/jira-service-management-cloud/"},"id":"1gXBh54v1sayA6w8yowM8u"},{"sys":{"id":"4z1mIelYHYwE6ugCuqEg0y"},"version":"Not Applicable","deployment":"Cloud","productBlurb":"Document collaboration","url":"confluence-cloud","icon":{"url":"https://images.ctfassets.net/zsv3d0ugroxu/5VucmXIhBRYyBXA9ygFJ3Y/5082d769a81934af185dcf109b29f628/logo-light_Confluence_mark_brand_RGB.svg"},"productNameReference":{"sys":{"id":"confluence"},"productName":"Confluence"},"deploymentUrls":{"cloud":"/confluence-cloud/"},"id":"4z1mIelYHYwE6ugCuqEg0y"},{"sys":{"id":"UhZk1Nq8UMkcuUsy6sI4C"},"version":"Not Applicable","deployment":"Cloud","productBlurb":"Git code management","url":"bitbucket-cloud","icon":{"url":"https://images.ctfassets.net/zsv3d0ugroxu/1g4197x84jic8a1P3b3IGT/1a752272b12824d3a3df4bc1e7dd2c53/logo-light_Bitbucket_mark_brand_RGB.svg"},"productNameReference":{"sys":{"id":"bitbucket"},"productName":"Bitbucket"},"deploymentUrls":{"cloud":"/bitbucket-cloud/"},"id":"UhZk1Nq8UMkcuUsy6sI4C"},{"sys":{"id":"7aO3e0I67vVoQJXGXm2pjr"},"version":"Not Applicable","deployment":"Cloud","productBlurb":"Work more collaboratively and get more done","url":"trello","icon":{"url":"https://images.ctfassets.net/zsv3d0ugroxu/1j6nvsJ8txgcxgy3Vmk4aO/e3b6d56c299ae744c2f4b8109cf1a482/logo-light_Trello_mark_brand_RGB.svg"},"productNameReference":{"sys":{"id":"3Pgvsvt3uylBV25qaoU8ui"},"productName":"Trello"},"deploymentUrls":{"cloud":"/trello/"},"id":"7aO3e0I67vVoQJXGXm2pjr"},{"sys":{"id":"OBPfqfSG24X1AQ74Oc9ob"},"version":"Not Applicable","deployment":"Cloud","productBlurb":"Rovo is helps your team find knowledge, learn from it and create action—through the power of AI.","url":"rovo","icon":{"url":"https://images.ctfassets.net/zsv3d0ugroxu/7GLXCkFtxe0MUSfmTNdrPL/1a042c58b850d16c6eb3339dc4532c0d/logo-light_Rovo_mark_brand_RGB.svg"},"productNameReference":{"sys":{"id":"1wFXee3vB0OUMBK6dJ5ncZ"},"productName":"Rovo"},"deploymentUrls":{"cloud":"/rovo/"},"id":"OBPfqfSG24X1AQ74Oc9ob"},{"sys":{"id":"74UlBDi4bbCZFw5rNyxpjj"},"version":"Not Applicable","deployment":"Cloud","productBlurb":"Loom is the video communication platform for async work.","url":"loom","icon":{"url":"https://images.ctfassets.net/zsv3d0ugroxu/1WJwDTYFClxfJJUOrhlevh/ea49afae7832f279d4769d04b004217e/Loom_blue.svg"},"productNameReference":{"sys":{"id":"6TYrk1y0pRJilwiT69uMgM"},"productName":"Loom"},"deploymentUrls":{"cloud":"/loom/"},"id":"74UlBDi4bbCZFw5rNyxpjj"},{"sys":{"id":"10SbTAPoOxxVcyZMNH20Kf"},"version":"Not Applicable","deployment":"Cloud","productBlurb":"Your team’s home for product discovery","url":"jira-product-discovery","icon":{"url":"https://images.ctfassets.net/zsv3d0ugroxu/UoGuPi0Q5W6nxm8P76Zun/7ff53cd380f66b6fe1dc27b8a9fd645a/logo-light_Jira-Product-Discovery_mark_brand_RGB.svg"},"productNameReference":{"sys":{"id":"22bKMdHH2crmVtvOW4gfGg"},"productName":"Jira Product Discovery"},"deploymentUrls":{"cloud":"/jira-product-discovery/"},"id":"10SbTAPoOxxVcyZMNH20Kf"},{"sys":{"id":"2QnaIiOyGAeI4aWeg4y8ms"},"version":"Not Applicable","deployment":"Cloud","productBlurb":"Manage any business project","url":"jira-work-management","icon":{"url":"https://images.ctfassets.net/zsv3d0ugroxu/3vfg7u3DhUSKK0pXuJ88hK/5619c55b3e05a43bee3af77f4e293824/JWM.svg"},"productNameReference":{"sys":{"id":"7kTpVjbv8bjQ67yVJiWQyh"},"productName":"Jira Work Management"},"deploymentUrls":{"cloud":"/jira-work-management/"},"id":"2QnaIiOyGAeI4aWeg4y8ms"},{"sys":{"id":"53Ep5GwhITPflhp1tT1Ale"},"version":"Not Applicable","deployment":"Cloud","productBlurb":"Unlock the agility of your enterprise","url":"jira-align","icon":{"url":"https://images.ctfassets.net/zsv3d0ugroxu/6eS3KCOum0OuJfHEBmhIy6/32785683c67d135aae596e6e66ec9646/logo-light_Jira-Align_mark_brand_RGB.svg"},"productNameReference":{"sys":{"id":"jiraalign"},"productName":"Jira Align"},"deploymentUrls":{"cloud":"/jira-align/"},"id":"53Ep5GwhITPflhp1tT1Ale"},{"sys":{"id":"5t76PH9Mw7zagigkXzUa8H"},"version":"Not Applicable","deployment":"Cloud","productBlurb":"Modern incident management","url":"opsgenie","icon":{"url":"https://images.ctfassets.net/zsv3d0ugroxu/3Mgc7MIYvTJ3EQ3ghceiVk/76c6a20b69802c434b973cb8098d490a/logo-light_Opsgenie_mark_brand_RGB.svg"},"productNameReference":{"sys":{"id":"opsgenie"},"productName":"Opsgenie"},"deploymentUrls":{"cloud":"/opsgenie/"},"id":"5t76PH9Mw7zagigkXzUa8H"},{"sys":{"id":"70RA5tkL23bUJmCn3bDjGy"},"version":"Not Applicable","deployment":"Cloud","productBlurb":"Build trust with every incident","url":"statuspage","icon":{"url":"https://images.ctfassets.net/zsv3d0ugroxu/39aRd69G7mmkTG6yY8H0EV/857285af871d13d1b6290d360a7cea67/logo-light_Statuspage_mark_brand_RGB.svg"},"productNameReference":{"sys":{"id":"statuspage"},"productName":"Statuspage"},"deploymentUrls":{"cloud":"/statuspage/"},"id":"70RA5tkL23bUJmCn3bDjGy"},{"sys":{"id":"GRwdL69kctHpHtKJ7zcJ1"},"version":"Not Applicable","deployment":"Cloud","productBlurb":"A teamwork directory","url":"platform-experiences","icon":{"url":"https://images.ctfassets.net/zsv3d0ugroxu/1EJJvH8M9OzrklPFmjq3Cg/e476c435a1743db02b9c811ae7a6a0e8/logo-light_Atlassian_mark_brand_RGB.svg"},"productNameReference":{"sys":{"id":"6kdRPGfYiLXS40s5lykYaS"},"productName":"Platform experiences"},"deploymentUrls":{"cloud":"/platform-experiences/"},"id":"GRwdL69kctHpHtKJ7zcJ1"},{"sys":{"id":"6wktSePjIQKs6KcqcCeyEO"},"version":"Not Applicable","deployment":"Cloud","productBlurb":null,"url":"team-calendars-cloud","icon":{"url":"https://images.ctfassets.net/zsv3d0ugroxu/5VucmXIhBRYyBXA9ygFJ3Y/5082d769a81934af185dcf109b29f628/logo-light_Confluence_mark_brand_RGB.svg"},"productNameReference":{"sys":{"id":"teamcalendars"},"productName":"Team Calendars"},"deploymentUrls":{"cloud":"/team-calendars-cloud/"},"id":"6wktSePjIQKs6KcqcCeyEO"},{"sys":{"id":"1wFo6tw3l6OQYIoCoW04MW"},"version":"Not Applicable","deployment":"Cloud","productBlurb":null,"url":"questions-for-confluence-cloud","icon":{"url":"https://images.ctfassets.net/zsv3d0ugroxu/5VucmXIhBRYyBXA9ygFJ3Y/5082d769a81934af185dcf109b29f628/logo-light_Confluence_mark_brand_RGB.svg"},"productNameReference":{"sys":{"id":"questionsforconfluence"},"productName":"Questions for Confluence"},"deploymentUrls":{"cloud":"/questions-for-confluence-cloud/"},"id":"1wFo6tw3l6OQYIoCoW04MW"},{"sys":{"id":"2z0gZxjenWQMWqIqUIqSWw"},"version":"Not Applicable","deployment":"Cloud","productBlurb":null,"url":"cloud","icon":{"url":"https://images.ctfassets.net/zsv3d0ugroxu/1EJJvH8M9OzrklPFmjq3Cg/e476c435a1743db02b9c811ae7a6a0e8/logo-light_Atlassian_mark_brand_RGB.svg"},"productNameReference":{"sys":{"id":"atlassiancloud"},"productName":"Atlassian Cloud"},"deploymentUrls":{"cloud":"/cloud/"},"id":"2z0gZxjenWQMWqIqUIqSWw"},{"sys":{"id":"5H0E33RpbSIBhC4Rf3X6sK"},"version":"Not Applicable","deployment":"Cloud","productBlurb":"Data visualization and analytics","url":"analytics","icon":{"url":"https://images.ctfassets.net/zsv3d0ugroxu/1LlGSRpoyIRimE0F2CabNM/9c8a89a7196fe549fbb855c8597776fe/logo-light_Atlassian-Analytics_mark_brand_RGB.svg"},"productNameReference":{"sys":{"id":"4114hkTUsuTHRSjjQUd8Dd"},"productName":"Atlassian Analytics"},"deploymentUrls":{"cloud":"/analytics/"},"id":"5H0E33RpbSIBhC4Rf3X6sK"},{"sys":{"id":"1IrNp77C6KQk9FZ7y8V1f2"},"version":"Not Applicable","deployment":"Cloud","productBlurb":"Mission control for your distributed architecture","url":"compass","icon":{"url":"https://images.ctfassets.net/zsv3d0ugroxu/3UAMHJdzO6e6NhYGD07Ugg/bf460d12761faed44a807bf7eb8a8c45/logo-light_Compass_mark_brand_RGB.svg"},"productNameReference":{"sys":{"id":"1ndBBFKwZNMEzDmJzMd6Wo"},"productName":"Compass"},"deploymentUrls":{"cloud":"/compass/"},"id":"1IrNp77C6KQk9FZ7y8V1f2"}],"serverProducts":[{"sys":{"id":"kvr1LpMbeXQeqBF6BJG5S"},"version":"Latest","deployment":"Server","productBlurb":"Project and issue tracking","url":"jira-software-server","icon":{"url":"https://images.ctfassets.net/zsv3d0ugroxu/1Ba3KU2ckjAMmeYoL9DgjO/e6710a37425ab1695046803d32c2db70/Jira_Software.svg"},"productNameReference":{"sys":{"id":"jirasoftware"},"productName":"Jira Software"},"deploymentUrls":{"server":"/jira-software-server/"},"id":"kvr1LpMbeXQeqBF6BJG5S"},{"sys":{"id":"1XBrxhXDoqegKhDG1BLAvI"},"version":"Latest","deployment":"Server","productBlurb":"Service management and customer support","url":"jira-service-management-server","icon":{"url":"https://images.ctfassets.net/zsv3d0ugroxu/5DppKv8q5q206zQzIRDKQq/f31b8874021ee7d6dd54389f902b1421/logo-light_Jira-Service-Management_mark_brand_RGB.svg"},"productNameReference":{"sys":{"id":"jiraservicedesk"},"productName":"Jira Service Management"},"deploymentUrls":{"server":"/jira-service-management-server/"},"id":"1XBrxhXDoqegKhDG1BLAvI"},{"sys":{"id":"1F1m8sxD1tMlsaORRYGD1f"},"version":"Latest","deployment":"Server","productBlurb":"Manage any business project","url":"jira-core-server","icon":{"url":"https://images.ctfassets.net/zsv3d0ugroxu/33jpVupw41aFgHx33pk79p/9fc5a1d056827ace938a74dd3a825f1e/jira_core_flat.svg"},"productNameReference":{"sys":{"id":"jiracore"},"productName":"Jira Core"},"deploymentUrls":{"server":"/jira-core-server/"},"id":"1F1m8sxD1tMlsaORRYGD1f"},{"sys":{"id":"zifyQJ8ZmqvAmcXgWIWSR"},"version":"Latest","deployment":"Server","productBlurb":"Document collaboration","url":"confluence-server","icon":{"url":"https://images.ctfassets.net/zsv3d0ugroxu/5VucmXIhBRYyBXA9ygFJ3Y/5082d769a81934af185dcf109b29f628/logo-light_Confluence_mark_brand_RGB.svg"},"productNameReference":{"sys":{"id":"confluence"},"productName":"Confluence"},"deploymentUrls":{"server":"/confluence-server/"},"id":"zifyQJ8ZmqvAmcXgWIWSR"},{"sys":{"id":"5nDH84LjHRq8Opn1Tmt2an"},"version":"Latest","deployment":"Server","productBlurb":"Git code management","url":"bitbucket-server","icon":{"url":"https://images.ctfassets.net/zsv3d0ugroxu/1g4197x84jic8a1P3b3IGT/1a752272b12824d3a3df4bc1e7dd2c53/logo-light_Bitbucket_mark_brand_RGB.svg"},"productNameReference":{"sys":{"id":"bitbucket"},"productName":"Bitbucket"},"deploymentUrls":{"server":"/bitbucket-server/"},"id":"5nDH84LjHRq8Opn1Tmt2an"},{"sys":{"id":"6aFX6UNeJUogMmuSW04uEO"},"version":"Latest","deployment":"Server","productBlurb":null,"url":"bamboo","icon":{"url":"https://images.ctfassets.net/zsv3d0ugroxu/3DpPNPOUpDyuOyzNTU0WhT/883c9475bbc82c16e9334e47d0c3cd81/logo-light_Bamboo_mark_brand_RGB.svg"},"productNameReference":{"sys":{"id":"bamboo"},"productName":"Bamboo"},"deploymentUrls":{"server":"/bamboo/"},"id":"6aFX6UNeJUogMmuSW04uEO"},{"sys":{"id":"4pI1aZ1P4QW82KKcU2o2A2"},"version":"Latest","deployment":"Server","productBlurb":null,"url":"crowd","icon":{"url":"https://images.ctfassets.net/zsv3d0ugroxu/7C9qBlldQMCQQmZYW9cKST/d9b5609c85b500bb065c99e38cf1a80a/logo-light_Crowd_mark_brand_RGB.svg"},"productNameReference":{"sys":{"id":"crowd"},"productName":"Crowd"},"deploymentUrls":{"server":"/crowd/"},"id":"4pI1aZ1P4QW82KKcU2o2A2"},{"sys":{"id":"5F7bce6w8w0eMqeqeGSa42"},"version":"Latest","deployment":"Server","productBlurb":null,"url":"crucible","icon":{"url":"https://images.ctfassets.net/zsv3d0ugroxu/Bmzjg8Jf9IjaKxJJRsdyg/18618a0ed9fb4c119be53772b6657197/logo-light_Crucible_mark_brand_RGB.svg"},"productNameReference":{"sys":{"id":"crucible"},"productName":"Crucible"},"deploymentUrls":{"server":"/crucible/"},"id":"5F7bce6w8w0eMqeqeGSa42"},{"sys":{"id":"x5esi3PpaoAAaekGEGWqY"},"version":"Latest","deployment":"Server","productBlurb":null,"url":"fisheye","icon":{"url":"https://images.ctfassets.net/zsv3d0ugroxu/1JPhscmMbQTiP584fioarJ/68c65896f78db9c082c74f029dfe14ba/logo-light_Fisheye_mark_brand_RGB.svg"},"productNameReference":{"sys":{"id":"fisheye"},"productName":"Fisheye"},"deploymentUrls":{"server":"/fisheye/"},"id":"x5esi3PpaoAAaekGEGWqY"},{"sys":{"id":"6DftT4SP0A6eiAkISKuu6Y"},"version":"Latest","deployment":"Server","productBlurb":null,"url":"sourcetree","icon":{"url":"https://images.ctfassets.net/zsv3d0ugroxu/7r8051IqGKLJPwloKRYSVB/1a9b1a101e4419823993cfe79ae8f023/logo-light_Sourcetree_mark_brand_RGB.svg"},"productNameReference":{"sys":{"id":"sourcetree"},"productName":"Sourcetree"},"deploymentUrls":{"server":"/sourcetree/"},"id":"6DftT4SP0A6eiAkISKuu6Y"},{"sys":{"id":"6pcStE2pewRQyCtz7yHnm1"},"version":"Latest","deployment":"Server","productBlurb":null,"url":"advanced-roadmaps-for-jira-server","icon":{"url":"https://images.ctfassets.net/zsv3d0ugroxu/33jpVupw41aFgHx33pk79p/9fc5a1d056827ace938a74dd3a825f1e/jira_core_flat.svg"},"productNameReference":{"sys":{"id":"portfolioforjira"},"productName":"Advanced Roadmaps for Jira"},"deploymentUrls":{"server":"/advanced-roadmaps-for-jira-server/"},"id":"6pcStE2pewRQyCtz7yHnm1"},{"sys":{"id":"2oDTelIDk4LAM0Bxomfo7m"},"version":"Latest","deployment":"Server","productBlurb":null,"url":"team-calendars-server","icon":{"url":"https://images.ctfassets.net/zsv3d0ugroxu/5VucmXIhBRYyBXA9ygFJ3Y/5082d769a81934af185dcf109b29f628/logo-light_Confluence_mark_brand_RGB.svg"},"productNameReference":{"sys":{"id":"teamcalendars"},"productName":"Team Calendars"},"deploymentUrls":{"server":"/team-calendars-server/"},"id":"2oDTelIDk4LAM0Bxomfo7m"},{"sys":{"id":"4FWxkzknncoyN31Gnft19o"},"version":"Latest","deployment":"Server","productBlurb":null,"url":"questions-for-confluence-server","icon":{"url":"https://images.ctfassets.net/zsv3d0ugroxu/5VucmXIhBRYyBXA9ygFJ3Y/5082d769a81934af185dcf109b29f628/logo-light_Confluence_mark_brand_RGB.svg"},"productNameReference":{"sys":{"id":"questionsforconfluence"},"productName":"Questions for Confluence"},"deploymentUrls":{"server":"/questions-for-confluence-server/"},"id":"4FWxkzknncoyN31Gnft19o"}],"additionalLinks":[{"linkLabel":"Contact support","linkUrl":"https://support.atlassian.com/contact/","linkIcon":{"url":"https://images.ctfassets.net/zsv3d0ugroxu/34aQizNVKUaasai48ASqg2/0ca6041940bcf6b5fd74e559b90eb9e9/question-circle.svg"}},{"linkLabel":"Training & Certification","linkUrl":"https://www.atlassian.com/university","linkIcon":null},{"linkLabel":"Atlassian Migration Program","linkUrl":"https://www.atlassian.com/cloud-migration","linkIcon":null},{"linkLabel":"GDPR guides","linkUrl":"https://confluence.atlassian.com/gdpr","linkIcon":null},{"linkLabel":"Enterprise services","linkUrl":"https://www.atlassian.com/enterprise/services","linkIcon":null},{"linkLabel":"Atlassian Partners","linkUrl":"https://www.atlassian.com/partners","linkIcon":null},{"linkLabel":"Developers","linkUrl":"https://developer.atlassian.com","linkIcon":null},{"linkLabel":"Success Central","linkUrl":"https://success.atlassian.com","linkIcon":null},{"linkLabel":"User groups","linkUrl":"http://aug.atlassian.com","linkIcon":null},{"linkLabel":"Automation for Jira","linkUrl":"https://support.atlassian.com/cloud-automation/docs/jira-cloud-automation/","linkIcon":null},{"linkLabel":"Atlassian.com","linkUrl":"http://www.atlassian.com","linkIcon":null}],"atlassianSupportLogo":{"url":"https://images.ctfassets.net/zsv3d0ugroxu/2a2EqJ1z4IOCa4EKCSAi2s/3f934328cbeb68b72892e7f50b65e380/support-logo-atlassian.svg"},"atlassianLogo":{"url":"https://images.ctfassets.net/zsv3d0ugroxu/2sOh4sF3DSm8Qy8GigKK0S/1c7619d9db378c5ee902d8eeb8fde65b/atlassian-logo-footer.svg"}},"resources":{"cards":[{"sys":{"id":"b3fTs5PrPymsKyewq2uee"},"title":"Documentation","buttonLink":"https://confluence.atlassian.com","buttonText":"View documentation","shortTitle":null,"shortDescription":"Usage and admin help","hideInHeader":true,"analytics":"${Product} Documentation","icon":{"url":"https://images.ctfassets.net/zsv3d0ugroxu/4Cs5CJu2HmeciSw8Mkko8o/95788f8f4964f0cd5a5354b97b471acb/rich_icon-User_manual.svg"},"id":"b3fTs5PrPymsKyewq2uee"},{"sys":{"id":"1eb4CYi6GQecc4S0amoCGm"},"title":"Knowledge Base","buttonLink":"https://atlassian.com","buttonText":"View knowledge base","shortTitle":null,"shortDescription":null,"hideInHeader":true,"analytics":"KnowledgeBase","icon":{"url":"https://images.ctfassets.net/zsv3d0ugroxu/7ca1Khsr72IW6UUSoOiMis/33d91b1c76b560d62852213d1f0fb5a9/lifesaver_Light_mode_spot.svg"},"id":"1eb4CYi6GQecc4S0amoCGm"},{"sys":{"id":"1jekufjl8YMw4eUKoI6kg6"},"title":"Community","buttonLink":"https://community.atlassian.com","buttonText":"Visit Atlassian Community","shortTitle":null,"shortDescription":"Answers, support and inspiration","hideInHeader":null,"analytics":"Community","icon":{"url":"https://images.ctfassets.net/zsv3d0ugroxu/199clY7qv6MQc2EasKkGim/b94d340fd8cfd453784e97b3a8c547ed/rich_icon-Community.svg"},"id":"1jekufjl8YMw4eUKoI6kg6"},{"sys":{"id":"5buCUK1TCgS2q6KMGkIkSy"},"title":"System Status","buttonLink":"https://status.atlassian.com/","buttonText":"View system status","shortTitle":null,"shortDescription":"Cloud services health","hideInHeader":null,"analytics":"System Status","icon":{"url":"https://images.ctfassets.net/zsv3d0ugroxu/mNCBZvDshqueq0EeKmise/94d904fbd231bfc5c90cf3bbee00a855/speedometer_Light_mode_spot.svg"},"id":"5buCUK1TCgS2q6KMGkIkSy"},{"sys":{"id":"2nRNjDkbCcUwSOq422y66"},"title":"Suggestions and bug reports","buttonLink":"https://jira.atlassian.com/secure/Dashboard.jspa?selectPageId=10440","buttonText":"View suggestions and bugs","shortTitle":"Suggestions and bugs","shortDescription":"Feature suggestions and bug reports","hideInHeader":null,"analytics":"Suggestion bug","icon":{"url":"https://images.ctfassets.net/zsv3d0ugroxu/4LAr0Xsaq4gUk60Uy6eYwk/e86fd54ec59e9b7e64516f3a0eb5aeb5/rich_icon-Lightbulb.svg"},"id":"2nRNjDkbCcUwSOq422y66"},{"sys":{"id":"77KyWObmQowc8oycAK6mo2"},"title":"Marketplace apps","buttonLink":"https://marketplace.atlassian.com/","buttonText":"View Marketplace","shortTitle":"Marketplace","shortDescription":"Product apps","hideInHeader":null,"analytics":"Marketplace","icon":{"url":"https://images.ctfassets.net/zsv3d0ugroxu/1ss3lke3aYcVp07USZwdMY/b9c86efbf54d4ce96607262a7cb3b3ef/rich_icon-Integration.svg"},"id":"77KyWObmQowc8oycAK6mo2"},{"sys":{"id":"t7tq3EzI9qwcKMaES0i0y"},"title":"Billing and licensing","buttonLink":"https://www.atlassian.com/licensing/purchase-licensing","buttonText":"View FAQs","shortTitle":null,"shortDescription":"Frequently asked questions","hideInHeader":null,"analytics":"Billing","icon":{"url":"https://images.ctfassets.net/zsv3d0ugroxu/5Cb1EEBbNKkm8uK24mIeEs/9ad6432e9652bd788ebf619c4d242cb5/rich_icon-Credit_cards.svg"},"id":"t7tq3EzI9qwcKMaES0i0y"}]},"preview":false,"contentType":"topic"}, contentType: "topic", contentAri: "ari:third-party:contentful::entry/zsv3d0ugroxu/master/7gNu65G72Su9Tu5vIGiIt8", featureFlags: {"isVideoEnabled":false}, pageTree: [{"id":"5o3qaiN9ECDNauaGXqxs0B","updatedAt":"2020-12-16T23:32:11.655Z","slug":"/provisioning-users/docs/provision-and-sync-users-from-an-identity-provider/","title":"Provision and sync users from an identity provider","childList":[{"id":"7gNu65G72Su9Tu5vIGiIt8","slug":"/provisioning-users/docs/understand-user-provisioning/","updatedAt":"2024-09-19T20:37:47.354Z","title":"Understand user provisioning","description":"Learn how user provisioning works and how users and groups sync when you make changes from your identity provider.","collectionId":"5o3qaiN9ECDNauaGXqxs0B"},{"id":"4H57HllC5KyW0VVr0FGmLE","updatedAt":"2020-12-16T23:34:24.543Z","slug":"/provisioning-users/docs/configure-user-provisioning/","title":"Configure user provisioning","childList":[{"id":"1IjFhvGkU5qkYCjDtskdAe","slug":"/provisioning-users/docs/configure-user-provisioning-with-an-identity-provider/","updatedAt":"2024-06-13T00:51:53.729Z","title":"Configure user provisioning with an identity provider","description":"Start syncing users and groups from your identity provider."},{"id":"1lZKH3HVI6iMfXGQ37H4pe","slug":"/provisioning-users/docs/configure-user-provisioning-with-google-cloud/","updatedAt":"2024-06-13T00:52:57.645Z","title":"Configure user provisioning with Google Cloud","description":"Start syncing users and groups from Google Cloud."},{"id":"12DULycmDKYY1DFLXNBZ0B","slug":"/provisioning-users/docs/configure-user-provisioning-with-okta/","updatedAt":"2024-06-13T00:51:24.379Z","title":"Configure user provisioning with Okta","description":"Start syncing users and groups from Okta."},{"id":"6xzv1ajeUj6bnNJe2mIzIZ","slug":"/provisioning-users/docs/configure-user-provisioning-for-active-directory-or-ldap/","updatedAt":"2023-10-06T18:54:01.120Z","title":"Configure user provisioning for Active Directory or LDAP","description":"Start syncing users and groups from Active Directory or LDAP."}],"description":"Sync users and groups from your organization's identity provider (e.g. Google Cloud, Okta) or Active Directory."},{"id":"5A37sc0oDeHnutLZ4iFSQg","slug":"/provisioning-users/docs/resolve-group-conflicts-when-syncing-users/","updatedAt":"2024-11-04T03:38:27.282Z","title":"Resolve group conflicts when syncing users","description":"Resolve duplicate names between your identity provider and your Atlassian groups. ","collectionId":"5o3qaiN9ECDNauaGXqxs0B"},{"id":"3AGJEAQjBSHPT9OlR9drCa","slug":"/provisioning-users/docs/sync-user-attributes-to-your-organization/","updatedAt":"2024-11-06T21:00:04.364Z","title":"Sync user attributes to your organization","description":"Update public name attribute for your user accounts.","collectionId":"5o3qaiN9ECDNauaGXqxs0B"}],"pageType":"Documentation"},{"id":"32i0QwnuGtZ9VQ23iB7H6s","updatedAt":"2022-06-23T21:17:50.562Z","slug":"/provisioning-users/docs/provision-and-sync-users-from-g-suite/","title":"Provision and sync users from Google Workspace","childList":[{"id":"1IkiUqqoST0KttqRBBnkUC","slug":"/provisioning-users/docs/connect-to-g-suite/","updatedAt":"2024-04-15T00:00:43.557Z","title":"Connect to Google Workspace","description":"Connect and disconnect your Atlassian organization.","collectionId":"32i0QwnuGtZ9VQ23iB7H6s"},{"id":"1A7Z0zU9mKlfDK2tPkok93","slug":"/provisioning-users/docs/set-up-g-suite/","updatedAt":"2024-05-08T21:00:26.638Z","title":"Set up Google Workspace","description":"Learn about Google Workspace user management settings.","collectionId":"32i0QwnuGtZ9VQ23iB7H6s"},{"id":"ahzpwFQs2AzcYl1dlNfij","slug":"/provisioning-users/docs/manage-g-suite-user-syncing/","updatedAt":"2023-10-06T18:54:15.898Z","title":"Manage Google Workspace user syncing","description":"Manage group and user syncing for your organization.","collectionId":"32i0QwnuGtZ9VQ23iB7H6s"},{"id":"401y43nV64pjEfTv9Hi37p","slug":"/provisioning-users/docs/resolve-conflicts-when-syncing-groups-from-g-suite/","updatedAt":"2022-07-01T23:32:28.665Z","title":"Resolve conflicts when syncing groups from Google Workspace","description":"Resolve duplicate names between your G Suite groups and your Atlassian groups. ","collectionId":"32i0QwnuGtZ9VQ23iB7H6s"},{"id":"6cNyNznu42d6MK259PixW4","slug":"/provisioning-users/docs/edit-g-suite-settings-and-users/","updatedAt":"2024-01-19T03:44:41.090Z","title":"Edit Google Workspace settings and users","description":"Learn how to edit Google Workspace sync settings.","collectionId":"32i0QwnuGtZ9VQ23iB7H6s"},{"id":"1CI7h4YUXrxgPUmogxwP0K","slug":"/provisioning-users/docs/require-users-to-log-in-with-google/","updatedAt":"2023-10-06T18:54:18.392Z","title":"Require users to log in with Google","description":"Learn how to require users to log in with Google when accessing your products.","collectionId":"32i0QwnuGtZ9VQ23iB7H6s"},{"id":"6ODzqddRdPXCZh9v7FG8Wo","slug":"/provisioning-users/docs/g-suite-connection-troubleshooting/","updatedAt":"2023-10-06T18:54:21.544Z","title":"G Suite connection troubleshooting","description":"Discover how to troubleshoot your Google Workspace connection.","collectionId":"32i0QwnuGtZ9VQ23iB7H6s"}],"pageType":"Documentation"},{"id":"3dS5y7v0wYzw7MGufsXLUL","updatedAt":"2023-08-03T02:24:12.945Z","slug":"/provisioning-users/docs/connect-identity-providers-to-your-organization/","title":"Connect identity providers to your organization","childList":[{"id":"2BXuP6iTf2bbe4hycbXT7n","updatedAt":"2024-06-17T04:29:30.539Z","slug":"/provisioning-users/docs/add-identity-providers-to-connect-users/","title":"Add identity providers to connect users","childList":[{"id":"2rEa4UYuzPdiB3HnTH70dS","slug":"/provisioning-users/docs/what-are-identity-providers/","updatedAt":"2024-03-10T04:02:06.594Z","title":"Why connect identity providers?","description":"Take advantage of the flexibility to connect multiple identity providers to your organization’s users and customers."},{"id":"73uqiku1HZm9bqa9zi55oP","slug":"/provisioning-users/docs/supported-identity-providers/","updatedAt":"2024-11-26T04:10:23.679Z","title":"Supported identity providers","description":"Find out which identity providers you can use for features such as single sign-on and user provisioning."},{"id":"2f1qONLJxAIzUiRY5taCvT","slug":"/provisioning-users/docs/what-are-the-steps-to-connect-an-identity-provider/","updatedAt":"2024-03-10T03:59:18.418Z","title":"What are the steps to connect an identity provider?","description":"Learn what it takes to connect an identity provider"},{"id":"3Z1Gs9JskW9oxj3HTocAdH","slug":"/provisioning-users/docs/terms-associated-with-your-identity-providers/","updatedAt":"2024-03-10T04:03:47.483Z","title":"Terms associated with identity providers","description":"Explore the terms you encounter when connecting an identity provider"},{"id":"682cPw5RvMDPI19DkW4ll7","slug":"/provisioning-users/docs/choose-your-identity-provider/","updatedAt":"2024-03-10T03:51:57.880Z","title":"Choose your identity provider","description":"Choose from available identity providers or set up your own"},{"id":"5lEHkFfwEz43XbPPmF3RLp","slug":"/provisioning-users/docs/what-are-setup-options-for-provisioning-and-single-sign-on/","updatedAt":"2024-06-13T00:20:22.835Z","title":"Connect an identity provider","description":"Connect an identity provider with SCIM provisioning and SAML single sign-on"},{"id":"74JBMOZFnj8WyNSBp48A2e","slug":"/provisioning-users/docs/disconnect-your-identity-provider/","updatedAt":"2024-03-10T04:00:49.989Z","title":"Disconnect your identity provider","description":"Learn how to disconnect an identity provider"}],"description":"Learn how to integrate your identity provider with an Atlassian organization"},{"id":"5C0Izv2GCGhP1MjTsseUgx","updatedAt":"2024-06-17T03:31:13.632Z","slug":"/provisioning-users/docs/link-domains-to-identity-provider-directories/","title":"Link domains to identity provider directories","childList":[{"id":"56uqJcFV4l3CZwtKgDVg12","slug":"/provisioning-users/docs/link-domains/","updatedAt":"2024-01-25T05:10:16.027Z","title":"Link domains","description":"Learn how to link domains to an identity provider directory"},{"id":"1Jnw4SJoIccvm3nyUtalI8","slug":"/provisioning-users/docs/link-domains-to-a-different-directory/","updatedAt":"2023-10-06T19:09:30.949Z","title":"Link domains to a different directory","description":"Learn how to move domains to different directories"},{"id":"5sjDvXt0TFOajDZsOygkBV","slug":"/provisioning-users/docs/what-are-directories/","updatedAt":"2023-10-06T19:09:32.102Z","title":"What are directories?","description":"Learn the difference between local and identity provider directories"},{"id":"6fDLvIr6bUi30PzFJyTovf","slug":"/provisioning-users/docs/what-are-linked-domains/","updatedAt":"2023-10-06T19:09:29.291Z","title":"What are linked domains?","description":"Link domains to manage and secure users from an identity provider"}],"description":"Learn how to manage user accounts with linked domains"},{"id":"72Q1OwmN5doB5HmbiwHJyU","updatedAt":"2024-03-10T04:43:26.091Z","slug":"/provisioning-users/docs/add-identity-providers-to-connect-portal-only-customers/","title":"Add identity providers to connect portal-only customers","childList":[{"id":"f3MVS2tfF0iJoLCXoshuo","slug":"/provisioning-users/docs/steps-to-connect-an-identity-provider-for-customers/","updatedAt":"2024-06-13T00:22:31.700Z","title":"Steps to connect an identity provider for customers","description":"Learn what it takes to connect an identity provider for your portal-only customers"},{"id":"24C7IeN2bcODCv1YmYGChr","slug":"/provisioning-users/docs/choose-your-identity-provider-for-portal-only-customers/","updatedAt":"2024-07-05T22:05:31.300Z","title":"Choose your identity provider for portal-only customers","description":"Choose from available identity providers for your portal-only customers"},{"id":"2M2Jr2BY3ae0nQ0DjeuQEd","slug":"/provisioning-users/docs/connect-an-identity-provider/","updatedAt":"2024-07-05T22:03:13.389Z","title":"Connect an identity provider for portal-only customers","description":"Connect an identity provider with SAML single sign-on for Jira Service Management customers"},{"id":"9h6X1fAW85X0e1UUEAu4d","slug":"/provisioning-users/docs/disconnect-your-identity-provider-for-portal-only-customers/","updatedAt":"2024-07-05T22:05:56.514Z","title":"Disconnect your identity provider for portal-only customers","description":"Learn how to disconnect an identity provider for portal-only customers"}],"description":"Learn how to integrate your identity provider with Jira Service Management site for customers"}],"pageType":"Documentation"},{"id":"43M4H3lEPfkWsIlYZZYhhZ","updatedAt":"2023-05-17T17:09:23.984Z","slug":"/provisioning-users/docs/provision-and-sync-users-from-microsoft-azure-ad/","title":" Provision and sync users from Microsoft Azure AD","childList":[{"id":"22qJqVjjlcAOYVDTWY3D0C","slug":"/provisioning-users/docs/choose-the-right-microsoft-azure-ad-option-for-you/","updatedAt":"2023-10-06T19:33:08.573Z","title":"Choose the right Microsoft Azure AD option for you","description":"Explore options for provisioning users from Azure AD to Atlassian, depending on your company's structure and setup requirements. ","collectionId":"43M4H3lEPfkWsIlYZZYhhZ"},{"id":"5g3dra2AUQCPzmt8MiQGTR","updatedAt":"2023-06-14T16:40:36.548Z","slug":"/provisioning-users/docs/connect-and-sync-azure-ad-for-nested-groups/","title":"Connect and sync Azure AD for nested groups","childList":[{"id":"2cZ5qvwkmhIed4EiRdFQoE","slug":"/provisioning-users/docs/connect-to-azure-active-directory/","updatedAt":"2024-06-13T00:52:25.376Z","title":"Connect to Azure Active Directory","description":"Allow Atlassian access to your Microsoft account to connect and sync users, groups, and domains to your Atlassian organization."},{"id":"48F8cDgWGWunhuBgYHUojf","slug":"/provisioning-users/docs/set-up-sync-settings/","updatedAt":"2024-03-18T08:10:01.738Z","title":"Set up sync settings","description":"Set up sync settings to enable automatic syncing, select users and groups to sync, and choose domains to be verified."},{"id":"7bO5miA9yK7w1CD217si9Y","slug":"/provisioning-users/docs/manage-sync-settings/","updatedAt":"2023-10-06T19:33:12.203Z","title":"Manage sync settings","description":"Monitor your sync status and edit sync settings."},{"id":"12D0GQ65fURqibku4jUIwz","slug":"/provisioning-users/docs/require-single-sign-on-for-user-login/","updatedAt":"2023-10-06T19:33:13.307Z","title":"Require single sign-on for user login","description":" Require users to log in with their Microsoft account through SAML single sign-on. "},{"id":"5Sd49xqBIoRTmeWMU6qyLo","slug":"/provisioning-users/docs/disconnect-azure-active-directory/","updatedAt":"2023-10-06T19:33:14.786Z","title":"Disconnect Azure Active Directory","description":"Disconnect your Microsoft account and your identity provider directory. "}],"description":"Connect to your Microsoft Azure Active Directory, set up user syncing, and monitor the sync status of groups and users."},{"id":"7nl0ag5Cxs5fH1Z6h79Cap","updatedAt":"2023-06-13T02:24:10.542Z","slug":"/provisioning-users/docs/switch-from-azure-ad-for-nested-groups-to-scim/","title":"Switch from Azure AD for nested groups to SCIM","childList":[],"description":" Explore how to switch from provisioning users with Azure AD for nested groups to provisioning users with SCIM."},{"id":"4YlN0RDIQ8mygJUuahXuzg","slug":"/provisioning-users/docs/switch-from-scim-to-azure-ad-for-nested-groups/","updatedAt":"2023-10-06T19:33:17.902Z","title":"Switch from SCIM to Azure AD for nested groups","description":"Explore how to switch from provisioning users with SCIM to provisioning with Azure AD for nested groups.","collectionId":"43M4H3lEPfkWsIlYZZYhhZ"},{"id":"20WLnuO8iJm7eiv0YmLJ2D","updatedAt":"2023-06-14T16:46:56.429Z","slug":"/provisioning-users/docs/understand-azure-ad-syncing-for-nested-groups/","title":"Understand Azure AD syncing for nested groups","childList":[{"id":"7EAELbUKoddushAJDQhuCC","slug":"/provisioning-users/docs/how-does-azure-ad-for-nested-groups-work/","updatedAt":"2023-10-06T19:33:19.171Z","title":"How does Azure AD for nested groups work?","description":"Flatten nested groups when you sync, which allows you to keep all effective group memberships."},{"id":"5ICIkxq74X9SfDe6vE1FN1","slug":"/provisioning-users/docs/what-are-nested-groups/","updatedAt":"2023-10-19T11:32:07.663Z","title":"What are nested groups?","description":"Learn the differences between nested groups with SCIM and Azure AD for nested groups. "},{"id":"5Blot8zw5mR5emvhHXb80J","slug":"/provisioning-users/docs/limitations-of-azure-ad-for-nested-groups/","updatedAt":"2023-10-06T19:33:21.628Z","title":"Limitations of Azure AD for nested groups","description":"Learn about the limitations of Azure AD for nested groups."}],"description":"Learn how Atlassian’s custom integration for Azure Active Directory works and how it handles nested groups and its limitations."}],"pageType":"Documentation"}], featuredEntries: [], }/* </sl:translate_generic_json> */; </script> <link href = "https://jcs-chat-widget.atlassian.com/assets/loader.js" rel="preload" as="script"> <link rel="canonical" href="https://support.atlassian.com/provisioning-users/docs/understand-user-provisioning/" /> <link rel="apple-touch-icon-precomposed" sizes="57x57" href="https://wac-cdn.atlassian.com/assets/img/favicons/atlassian/apple-touch-icon-57x57.png"> <link rel="apple-touch-icon-precomposed" sizes="114x114" href="https://wac-cdn.atlassian.com/assets/img/favicons/atlassian/apple-touch-icon-114x114.png"> <link rel="apple-touch-icon-precomposed" sizes="72x72" href="https://wac-cdn.atlassian.com/assets/img/favicons/atlassian/apple-touch-icon-72x72.png"> <link rel="apple-touch-icon-precomposed" sizes="144x144" href="https://wac-cdn.atlassian.com/assets/img/favicons/atlassian/apple-touch-icon-144x144.png"> <link rel="apple-touch-icon-precomposed" sizes="120x120" href="https://wac-cdn.atlassian.com/assets/img/favicons/atlassian/apple-touch-icon-120x120.png"> <link rel="apple-touch-icon-precomposed" sizes="152x152" href="https://wac-cdn.atlassian.com/assets/img/favicons/atlassian/apple-touch-icon-152x152.png"> <link rel="icon" type="image/png" href="https://wac-cdn.atlassian.com/assets/img/favicons/atlassian/favicon.png" sizes="32x32"> <link rel="mask-icon" href="https://wac-cdn.atlassian.com/assets/img/favicons/atlassian/safari-pinned-tab.svg" color="#59afe1"> <meta name="msapplication-TileColor" content="#ffffff"> <meta name="msapplication-TileImage" content="https://wac-cdn.atlassian.com/assets/img/favicons/atlassian/mstile-144x144.png"> <meta data-testid="meta_title" property="og:title" content="Understand user provisioning | Atlassian Support" /> <link rel="alternate" href="https://support.atlassian.com/ja/provisioning-users/docs/understand-user-provisioning/" hreflang="ja" /> <link rel="alternate" href="https://support.atlassian.com/provisioning-users/docs/understand-user-provisioning/" hreflang="x-default" /> <link rel="preload" href="/resources/Charlie_Display-Semibold.0b0d15c6e3c89a737e12.woff" as="font" type="font/woff" crossorigin="anonymous"> <meta itemProp="url" content="https://support.atlassian.com/provisioning-users/docs/understand-user-provisioning/"/><meta property="og:url" content="https://support.atlassian.com/provisioning-users/docs/understand-user-provisioning/"/><meta data-testid="sitewide-metadata-language" itemProp="inLanguage" content="en-US"/><meta property="og:locale" content="en-US"/><meta itemProp="publisher" content="Atlassian"/><meta itemProp="license" content="Except where otherwise noted, content in this space is licensed under a <a href="https://creativecommons.org/licenses/by/2.5/au/">Creative Commons Attribution 2.5 Australia License</a>."/><meta itemProp="logo" content="https://images.ctfassets.net/zsv3d0ugroxu/4usk6GCfTOCSKCwCQykYIu/34d7ed0904d9a0274fb906f86f51e1e1/Atlassian-vertical-blue-onecolor-rgb.svg"/><meta itemProp="legalName" content="Atlassian Corporation Plc"/><meta itemProp="owns" content="Jira Software,Jira Service Management,Jira Work Management,Jira Align,Confluence,Hipchat,Bitbucket,Bamboo,Crucible,Crowd,Sourcetree,OpsGenie,Statuspage,Trello,Halp,Mindville"/><meta property="og:site_name" content="Atlassian Support"/><meta name="google-site-verification" content="Lwmfu2vZQ0v_OCc48kYQNXCcmgP7Gj6Fg2kL08Xhfn0"/><meta name="botify-site-verification" content="hY5hGfcz5nP5IQlF34bo5hbgmle2cSeO"/><meta http-equiv="X-UA-Compatible" content="IE=EDGE"/><meta name="viewport" content="width=device-width, initial-scale=1"/><meta charSet="utf-8"/><meta itemProp="dateModified" content="2024-09-19T20:37:47.354Z"/><meta name="description" content="Sync users and groups from a directory in your identity provider with SCIM user provisioning."/><meta property="og:description" content="Sync users and groups from a directory in your identity provider with SCIM user provisioning."/><meta itemProp="name" content="Understand user provisioning"/><meta itemProp="brand" content="Provisioning users"/><meta data-testid="meta_pageType" name="page-type" content="Documentation"/> <script data-react-helmet="true" type="application/ld+json">{"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"item":{"@id":"/","name":"Atlassian Support"}},{"@type":"ListItem","position":2,"item":{"@id":"/provisioning-users/resources/","name":"Provisioning users Resources"}},{"@type":"ListItem","position":3,"item":{"@id":"/provisioning-users/docs/provision-and-sync-users-from-an-identity-provider/","name":"Provision and sync users from an identity provider"}}]}</script>  <script src="https://cdnjs.cloudflare.com/polyfill/v3/polyfill.min.js?features=fetch,es5,es6,es7,default,Element.prototype.append&flags=gated" type="text/javascript" charset="UTF-8" > </script>  <script src="https://cdn.evgnet.com/beacon/atlassian/engage/scripts/evergageFlickerDefender.min.js"></script> <script type="text/javascript"> var _aaq = window._aaq || (window._aaq = []); (function(){ var d = document, g = d.createElement('script'), s = d.getElementsByTagName('script')[0]; g.type = 'text/javascript'; g.defer = true; g.async = true; g.src = document.location.protocol + '//cdn.evgnet.com/beacon/atlassian/engage/scripts/evergage.min.js'; s.parentNode.insertBefore(g, s); })(); </script>  <style data-styled-components="bZGgwh cZJnvt iLtbJJ hSsjZP ibwhYF eMLfYp eUeRWO jcVgLC korNWI gvARzl btRcgO bcCCNc jqBRrP kULDQW ktEnzR lljZNu kUYcyx gEdAYa fIPKnQ jjYaPd hAPZyn fVLHZh dqqHMN dKMyAW kLcQuX chsOMG bcqBjl ieACwX jkUDCC dNlTAn krWSDT iAlJQF kjpcSg hBeamM jklceZ ezJZXo iFRukD brjzuU PgEDm ezQlwD jBPlWM jqZvvE fjMiSz byHcWR emQnmn fffDij dJbcJh iLptLB bTsvjP dcQPEg eAxjKI dnzyaD eiYreW fItpNE eMRgDW gZerWW kSIZGq liwvXr hDwNJB iILgrR gHJZiQ cpdxlQ"> /* sc-component-id: sc-bxivhb */ .ezJZXo{display:-webkit-box;display:-webkit-flex;display:-ms-flexbox;display:flex;border-radius:3px;background-color:#FFFAE6;padding:16px;}.iFRukD{display:-webkit-box;display:-webkit-flex;display:-ms-flexbox;display:flex;border-radius:3px;background-color:#DEEBFF;padding:16px;}.brjzuU{display:-webkit-box;display:-webkit-flex;display:-ms-flexbox;display:flex;border-radius:3px;background-color:#E3FCEF;padding:16px;} /* sc-component-id: sc-ifAKCX */ .ezQlwD{-webkit-box-flex:1;-webkit-flex-grow:1;-ms-flex-positive:1;flex-grow:1;} /* sc-component-id: sc-bZQynM */ * + .jBPlWM{margin-top:8px;} /* sc-component-id: sc-dnqmqq */ .PgEDm{-webkit-flex:0 0 auto;-ms-flex:0 0 auto;flex:0 0 auto;width:40px;} .PgEDm > span{margin:-2px 0;vertical-align:top;} /* sc-component-id: Icon__IconWrapper-dyhwwi-0 */ .dqqHMN{height:16px;width:16px;color:currentColor;display:inline-block;fill:#FFFFFF;-webkit-flex-shrink:0;-ms-flex-negative:0;flex-shrink:0;line-height:1;} .dqqHMN > svg{height:16px;width:16px;max-height:100%;max-width:100%;overflow:hidden;pointer-events:none;vertical-align:bottom;} .dqqHMN stop{stop-color:currentColor;}.dKMyAW{color:#FF8B00;display:inline-block;fill:#FFFAE6;-webkit-flex-shrink:0;-ms-flex-negative:0;flex-shrink:0;line-height:1;} .dKMyAW > svg{max-height:100%;max-width:100%;overflow:hidden;pointer-events:none;vertical-align:bottom;} .dKMyAW stop{stop-color:currentColor;}.kLcQuX{color:#0747A6;display:inline-block;fill:#DEEBFF;-webkit-flex-shrink:0;-ms-flex-negative:0;flex-shrink:0;line-height:1;} .kLcQuX > svg{max-height:100%;max-width:100%;overflow:hidden;pointer-events:none;vertical-align:bottom;} .kLcQuX stop{stop-color:currentColor;}.chsOMG{color:#006644;display:inline-block;fill:#E3FCEF;-webkit-flex-shrink:0;-ms-flex-negative:0;flex-shrink:0;line-height:1;} .chsOMG > svg{max-height:100%;max-width:100%;overflow:hidden;pointer-events:none;vertical-align:bottom;} .chsOMG stop{stop-color:currentColor;}.bcqBjl{color:currentColor;display:inline-block;fill:#FFFFFF;-webkit-flex-shrink:0;-ms-flex-negative:0;flex-shrink:0;line-height:1;} .bcqBjl > svg{max-height:100%;max-width:100%;overflow:hidden;pointer-events:none;vertical-align:bottom;} .bcqBjl stop{stop-color:currentColor;}.ieACwX{height:32px;width:32px;color:currentColor;display:inline-block;fill:#FFFFFF;-webkit-flex-shrink:0;-ms-flex-negative:0;flex-shrink:0;line-height:1;} .ieACwX > svg{height:32px;width:32px;max-height:100%;max-width:100%;overflow:hidden;pointer-events:none;vertical-align:bottom;} .ieACwX stop{stop-color:currentColor;}.jkUDCC{color:inherit;display:inline-block;fill:inherit;-webkit-flex-shrink:0;-ms-flex-negative:0;flex-shrink:0;line-height:1;} .jkUDCC > svg{max-height:100%;max-width:100%;overflow:hidden;pointer-events:none;vertical-align:bottom;} .jkUDCC stop{stop-color:currentColor;} /* sc-component-id: sc-jTzLTM */ .fjMiSz{display:-webkit-box;display:-webkit-flex;display:-ms-flexbox;display:flex;-webkit-flex-basis:100%;-ms-flex-preferred-size:100%;flex-basis:100%;-webkit-flex-direction:column;-ms-flex-direction:column;flex-direction:column;-webkit-box-flex:1;-webkit-flex-grow:1;-ms-flex-positive:1;flex-grow:1;max-width:100%;min-height:0%;} /* sc-component-id: sc-fjdhpX */ .dcQPEg{display:-webkit-box;display:-webkit-flex;display:-ms-flexbox;display:flex;-webkit-box-flex:1;-webkit-flex-grow:1;-ms-flex-positive:1;flex-grow:1;min-height:0%;padding-left:8px;padding-right:8px;} /* sc-component-id: sc-jzJRlG */ .byHcWR{position:relative;} /* sc-component-id: sc-cSHVUG */ .dJbcJh{display:-webkit-box;display:-webkit-flex;display:-ms-flexbox;display:flex;font-weight:500;list-style-type:none;margin:0;padding:0;} /* sc-component-id: sc-kAzzGY */ .emQnmn{background-color:#EBECF0;border-radius:2px;bottom:0;content:'';height:2px;left:8px;margin:0;position:absolute;right:8px;width:inherit;}.fffDij{background-color:#0052CC;border-radius:2px;bottom:0;content:'';height:2px;left:8px;margin:0;position:absolute;right:8px;width:inherit;} /* sc-component-id: sc-chPdSV */ .iLptLB{color:#0052CC;cursor:pointer;line-height:1.8;margin:0;padding:4px 8px;position:relative;white-space:nowrap;overflow:hidden;text-overflow:ellipsis;} .iLptLB:hover{color:#0052CC;} .iLptLB:active,.iLptLB:active::before{color:#0052CC;} .iLptLB:focus{border-radius:3px;box-shadow:0 0 0 2px #0052CC inset;outline:none;}.bTsvjP{color:#42526E;cursor:pointer;line-height:1.8;margin:0;padding:4px 8px;position:relative;white-space:nowrap;overflow:hidden;text-overflow:ellipsis;} .bTsvjP:hover{color:#0052CC;} .bTsvjP:active,.bTsvjP:active::before{color:#0747A6;} .bTsvjP:focus{border-radius:3px;box-shadow:0 0 0 2px #4C9AFF inset;outline:none;} /* sc-component-id: sc-keyframes-bZGgwh */ @-webkit-keyframes bZGgwh{from{opacity:0;}to{opacity:0;}} @keyframes bZGgwh{from{opacity:0;}to{opacity:0;}} /* sc-component-id: sc-keyframes-cZJnvt */ @-webkit-keyframes cZJnvt{from{-webkit-transform:rotate(50deg);-ms-transform:rotate(50deg);transform:rotate(50deg);}to{-webkit-transform:rotate(230deg);-ms-transform:rotate(230deg);transform:rotate(230deg);}} @keyframes cZJnvt{from{-webkit-transform:rotate(50deg);-ms-transform:rotate(50deg);transform:rotate(50deg);}to{-webkit-transform:rotate(230deg);-ms-transform:rotate(230deg);transform:rotate(230deg);}} /* sc-component-id: sc-keyframes-iLtbJJ */ @-webkit-keyframes iLtbJJ{from{-webkit-transform:rotate(230deg);-ms-transform:rotate(230deg);transform:rotate(230deg);}to{-webkit-transform:rotate(510deg);-ms-transform:rotate(510deg);transform:rotate(510deg);}} @keyframes iLtbJJ{from{-webkit-transform:rotate(230deg);-ms-transform:rotate(230deg);transform:rotate(230deg);}to{-webkit-transform:rotate(510deg);-ms-transform:rotate(510deg);transform:rotate(510deg);}} /* sc-component-id: sc-keyframes-hSsjZP */ @-webkit-keyframes hSsjZP{from{opacity:1;}to{opacity:0;}} @keyframes hSsjZP{from{opacity:1;}to{opacity:0;}} /* sc-component-id: sc-keyframes-ibwhYF */ @-webkit-keyframes ibwhYF{to{-webkit-transform:rotate(360deg);-ms-transform:rotate(360deg);transform:rotate(360deg);}} @keyframes ibwhYF{to{-webkit-transform:rotate(360deg);-ms-transform:rotate(360deg);transform:rotate(360deg);}} /* sc-component-id: sc-keyframes-eMLfYp */ @-webkit-keyframes eMLfYp{from{opacity:0;}to{opacity:1;}} @keyframes eMLfYp{from{opacity:0;}to{opacity:1;}} /* sc-component-id: sc-keyframes-eUeRWO */ @-webkit-keyframes eUeRWO{from{stroke-dashoffset:43.982297150257104px;}to{stroke-dashoffset:35.18583772020568px;}} @keyframes eUeRWO{from{stroke-dashoffset:43.982297150257104px;}to{stroke-dashoffset:35.18583772020568px;}} /* sc-component-id: sc-keyframes-jcVgLC */ @-webkit-keyframes jcVgLC{from{stroke-dashoffset:69.11503837897544px;}to{stroke-dashoffset:55.29203070318036px;}} @keyframes jcVgLC{from{stroke-dashoffset:69.11503837897544px;}to{stroke-dashoffset:55.29203070318036px;}} /* sc-component-id: sc-keyframes-korNWI */ @-webkit-keyframes korNWI{from{stroke-dashoffset:135.0884841043611px;}to{stroke-dashoffset:108.07078728348888px;}} @keyframes korNWI{from{stroke-dashoffset:135.0884841043611px;}to{stroke-dashoffset:108.07078728348888px;}} /* sc-component-id: sc-keyframes-gvARzl */ @-webkit-keyframes gvARzl{from{stroke-dashoffset:270.1769682087222px;}to{stroke-dashoffset:216.14157456697777px;}} @keyframes gvARzl{from{stroke-dashoffset:270.1769682087222px;}to{stroke-dashoffset:216.14157456697777px;}} /* sc-component-id: sc-jKJlTe */ .eAxjKI{-webkit-align-items:baseline;-webkit-box-align:baseline;-ms-flex-align:baseline;align-items:baseline;background:none;border-radius:3px;border-width:0;box-sizing:border-box;color:#0052CC !important;cursor:default;display:-webkit-inline-box;display:-webkit-inline-flex;display:-ms-inline-flexbox;display:inline-flex;font-size:inherit;font-style:normal;height:2.2857142857142856em;line-height:2.2857142857142856em;margin:0;max-width:100%;outline:none !important;padding:0 8px;text-align:center;-webkit-text-decoration:none;text-decoration:none;-webkit-transition:background 0.1s ease-out,box-shadow 0.15s cubic-bezier(0.47,0.03,0.49,1.38);transition:background 0.1s ease-out,box-shadow 0.15s cubic-bezier(0.47,0.03,0.49,1.38);-webkit-transition-duration:0.1s,0.15s;transition-duration:0.1s,0.15s;vertical-align:middle;white-space:nowrap;width:auto;} .eAxjKI::-moz-focus-inner{border:0;margin:0;padding:0;}.dnzyaD{-webkit-align-items:baseline;-webkit-box-align:baseline;-ms-flex-align:baseline;align-items:baseline;background:rgba(9,30,66,0.04);border-radius:3px;border-width:0;box-sizing:border-box;color:#505F79 !important;cursor:default;display:-webkit-inline-box;display:-webkit-inline-flex;display:-ms-inline-flexbox;display:inline-flex;font-size:inherit;font-style:normal;height:2.2857142857142856em;line-height:2.2857142857142856em;margin:0;max-width:100%;outline:none !important;padding:0 8px;text-align:center;-webkit-text-decoration:none;text-decoration:none;-webkit-transition:background 0.1s ease-out,box-shadow 0.15s cubic-bezier(0.47,0.03,0.49,1.38);transition:background 0.1s ease-out,box-shadow 0.15s cubic-bezier(0.47,0.03,0.49,1.38);-webkit-transition-duration:0.1s,0.15s;transition-duration:0.1s,0.15s;vertical-align:middle;white-space:nowrap;width:auto;} .dnzyaD::-moz-focus-inner{border:0;margin:0;padding:0;} /* sc-component-id: sc-bbmXgH */ a.gZerWW{-webkit-align-items:baseline;-webkit-box-align:baseline;-ms-flex-align:baseline;align-items:baseline;background:none;border-radius:3px;border-width:0;box-sizing:border-box;color:#6B778C !important;cursor:default;display:-webkit-inline-box;display:-webkit-inline-flex;display:-ms-inline-flexbox;display:inline-flex;font-size:inherit;font-style:normal;height:auto;line-height:inherit;margin:0;max-width:100%;outline:none !important;padding:0;text-align:center;-webkit-text-decoration:none;text-decoration:none;-webkit-transition:background 0.1s ease-out,box-shadow 0.15s cubic-bezier(0.47,0.03,0.49,1.38);transition:background 0.1s ease-out,box-shadow 0.15s cubic-bezier(0.47,0.03,0.49,1.38);-webkit-transition-duration:0.1s,0.15s;transition-duration:0.1s,0.15s;vertical-align:baseline;white-space:nowrap;width:auto;} a.gZerWW::-moz-focus-inner{border:0;margin:0;padding:0;} /* sc-component-id: Button__ButtonElement-sc-114ur46-0 */ .eMRgDW{max-width:150px !important;} /* sc-component-id: BreadcrumbsItem__BreadcrumbsItemElement-sc-1hh8yo5-0 */ .fItpNE{display:-webkit-box;display:-webkit-flex;display:-ms-flexbox;display:flex;-webkit-flex-direction:row;-ms-flex-direction:row;flex-direction:row;height:1.7142857142857142em;line-height:1.7142857142857142em;padding:0;box-sizing:border-box;max-width:100%;} /* sc-component-id: Separator-c8t0qf-0 */ .kSIZGq{color:#7A869A;-webkit-flex-shrink:0;-ms-flex-negative:0;flex-shrink:0;padding:0 8px;text-align:center;width:8px;} /* sc-component-id: BreadcrumbsContainer-tgj96-0 */ .eiYreW{color:#5E6C84;display:-webkit-box;display:-webkit-flex;display:-ms-flexbox;display:flex;-webkit-flex-wrap:wrap;-ms-flex-wrap:wrap;flex-wrap:wrap;} /* sc-component-id: sc-cmthru */ .hBeamM{color:inherit;display:inline-block;fill:currentColor;height:16px;position:relative;-webkit-user-select:none;-moz-user-select:none;-ms-user-select:none;user-select:none;} .hBeamM > svg{fill:inherit;height:100%;left:0;position:absolute;top:0;width:100%;} .hBeamM > canvas{display:block;height:100%;visibility:hidden;} .hBeamM stop{stop-color:currentColor;} /* sc-component-id: Radio__Label-sc-2hlmhw-0 */ .liwvXr{-webkit-align-items:flex-start;-webkit-box-align:flex-start;-ms-flex-align:flex-start;align-items:flex-start;color:#091E42;display:-webkit-box;display:-webkit-flex;display:-ms-flexbox;display:flex;} /* sc-component-id: Radio__LabelText-sc-2hlmhw-1 */ .cpdxlQ{padding:2px 4px;} /* sc-component-id: Radio__IconWrapper-sc-2hlmhw-2 */ .gHJZiQ{line-height:0;-webkit-flex-shrink:0;-ms-flex-negative:0;flex-shrink:0;color:#FAFBFC;fill:transparent;-webkit-transition:all 0.2s ease-in-out;transition:all 0.2s ease-in-out;} .gHJZiQ circle:first-of-type{-webkit-transition:stroke 0.2s ease-in-out;transition:stroke 0.2s ease-in-out;stroke:#DFE1E6;stroke-width:2px;} /* sc-component-id: RadioInput__RadioInputWrapper-uvnzru-0 */ .hDwNJB{display:-webkit-box;display:-webkit-flex;display:-ms-flexbox;display:flex;-webkit-flex-shrink:0;-ms-flex-negative:0;flex-shrink:0;position:relative;} /* sc-component-id: RadioInput__HiddenInput-uvnzru-1 */ .iILgrR{position:absolute;top:50%;left:50%;padding:0;margin:0;-webkit-transform:translate(-50%,-50%);-ms-transform:translate(-50%,-50%);transform:translate(-50%,-50%);opacity:0;} /* sc-component-id: sc-keyframes-btRcgO */ @-webkit-keyframes btRcgO{0%{-webkit-animation-timing-function:cubic-bezier(0.23830050393398,0,0.25586732616931,0.79011192334632);animation-timing-function:cubic-bezier(0.23830050393398,0,0.25586732616931,0.79011192334632);max-width:200px;}20%{-webkit-animation-timing-function:cubic-bezier(0.21787238302442,0.98324004924648,0.58694150667646,1);animation-timing-function:cubic-bezier(0.21787238302442,0.98324004924648,0.58694150667646,1);max-width:160px;}100%{max-width:0;}} @keyframes btRcgO{0%{-webkit-animation-timing-function:cubic-bezier(0.23830050393398,0,0.25586732616931,0.79011192334632);animation-timing-function:cubic-bezier(0.23830050393398,0,0.25586732616931,0.79011192334632);max-width:200px;}20%{-webkit-animation-timing-function:cubic-bezier(0.21787238302442,0.98324004924648,0.58694150667646,1);animation-timing-function:cubic-bezier(0.21787238302442,0.98324004924648,0.58694150667646,1);max-width:160px;}100%{max-width:0;}} /* sc-component-id: sc-dymIpo */ .gEdAYa{position:relative;width:100%;} /* sc-component-id: sc-bnXvFD */ .jjYaPd{color:currentColor;display:inline-block;fill:#FFFFFF;-webkit-flex-shrink:0;-ms-flex-negative:0;flex-shrink:0;line-height:1;} .jjYaPd > svg{max-height:100%;max-width:100%;overflow:hidden;pointer-events:none;vertical-align:bottom;} .jjYaPd stop{stop-color:currentColor;}.hAPZyn{height:24px;width:24px;color:currentColor;display:inline-block;fill:#FFFFFF;-webkit-flex-shrink:0;-ms-flex-negative:0;flex-shrink:0;line-height:1;} .hAPZyn > svg{height:24px;width:24px;max-height:100%;max-width:100%;overflow:hidden;pointer-events:none;vertical-align:bottom;} .hAPZyn stop{stop-color:currentColor;} /* sc-component-id: sc-gJWqzi */ .krWSDT{width:250px;max-width:100%;float:none;margin:24px auto;position:relative;} tr .krWSDT{max-width:100%;} .krWSDT:not(.is-resizing){-webkit-transition:width 100ms ease-in;transition:width 100ms ease-in;} .krWSDT::after{content:'';display:block;padding-bottom:80.000%;font-size:0;line-height:0;} .krWSDT > div{position:absolute;height:100%;} .krWSDT [data-node-type='media']{position:static !important;} .krWSDT [data-node-type='media'] > div{position:absolute;height:100%;}.iAlJQF{width:441px;max-width:100%;float:none;margin:24px auto;position:relative;} tr .iAlJQF{max-width:100%;} .iAlJQF:not(.is-resizing){-webkit-transition:width 100ms ease-in;transition:width 100ms ease-in;} .iAlJQF::after{content:'';display:block;padding-bottom:24.717%;font-size:0;line-height:0;} .iAlJQF > div{position:absolute;height:100%;} .iAlJQF [data-node-type='media']{position:static !important;} .iAlJQF [data-node-type='media'] > div{position:absolute;height:100%;}.kjpcSg{width:57px;max-width:100%;float:none;margin:24px auto;position:relative;} tr .kjpcSg{max-width:100%;} .kjpcSg:not(.is-resizing){-webkit-transition:width 100ms ease-in;transition:width 100ms ease-in;} .kjpcSg::after{content:'';display:block;padding-bottom:60.769%;font-size:0;line-height:0;} .kjpcSg > div{position:absolute;height:100%;} .kjpcSg [data-node-type='media']{position:static !important;} .kjpcSg [data-node-type='media'] > div{position:absolute;height:100%;} /* sc-component-id: sc-kXeGPI */ .fIPKnQ{font-size:14px;line-height:24px;color:#172B4D;word-wrap:break-word;white-space:pre-wrap;} .fIPKnQ h1 .heading-anchor-wrapper{position:absolute;width:0;height:1.1666666666666667em;} .fIPKnQ h1 .heading-anchor-wrapper button{opacity:0;-webkit-transform:translate(8px,0px);-ms-transform:translate(8px,0px);transform:translate(8px,0px);-webkit-transition:opacity 0.2s ease 0s,-webkit-transform 0.2s ease 0s;-webkit-transition:opacity 0.2s ease 0s,transform 0.2s ease 0s;transition:opacity 0.2s ease 0s,transform 0.2s ease 0s;} .fIPKnQ h1:hover .heading-anchor-wrapper button{opacity:1;-webkit-transform:none;-ms-transform:none;transform:none;width:unset;} .fIPKnQ h2 .heading-anchor-wrapper{position:absolute;width:0;height:1.2em;} .fIPKnQ h2 .heading-anchor-wrapper button{opacity:0;-webkit-transform:translate(8px,0px);-ms-transform:translate(8px,0px);transform:translate(8px,0px);-webkit-transition:opacity 0.2s ease 0s,-webkit-transform 0.2s ease 0s;-webkit-transition:opacity 0.2s ease 0s,transform 0.2s ease 0s;transition:opacity 0.2s ease 0s,transform 0.2s ease 0s;} .fIPKnQ h2:hover .heading-anchor-wrapper button{opacity:1;-webkit-transform:none;-ms-transform:none;transform:none;width:unset;} .fIPKnQ h3 .heading-anchor-wrapper{position:absolute;width:0;height:1.25em;} .fIPKnQ h3 .heading-anchor-wrapper button{opacity:0;-webkit-transform:translate(8px,0px);-ms-transform:translate(8px,0px);transform:translate(8px,0px);-webkit-transition:opacity 0.2s ease 0s,-webkit-transform 0.2s ease 0s;-webkit-transition:opacity 0.2s ease 0s,transform 0.2s ease 0s;transition:opacity 0.2s ease 0s,transform 0.2s ease 0s;} .fIPKnQ h3:hover .heading-anchor-wrapper button{opacity:1;-webkit-transform:none;-ms-transform:none;transform:none;width:unset;} .fIPKnQ h4 .heading-anchor-wrapper{position:absolute;width:0;height:1.1428571428571428em;} .fIPKnQ h4 .heading-anchor-wrapper button{opacity:0;-webkit-transform:translate(8px,0px);-ms-transform:translate(8px,0px);transform:translate(8px,0px);-webkit-transition:opacity 0.2s ease 0s,-webkit-transform 0.2s ease 0s;-webkit-transition:opacity 0.2s ease 0s,transform 0.2s ease 0s;transition:opacity 0.2s ease 0s,transform 0.2s ease 0s;} .fIPKnQ h4:hover .heading-anchor-wrapper button{opacity:1;-webkit-transform:none;-ms-transform:none;transform:none;width:unset;} .fIPKnQ h5 .heading-anchor-wrapper{position:absolute;width:0;height:1.3333333333333333em;} .fIPKnQ h5 .heading-anchor-wrapper button{opacity:0;-webkit-transform:translate(8px,0px);-ms-transform:translate(8px,0px);transform:translate(8px,0px);-webkit-transition:opacity 0.2s ease 0s,-webkit-transform 0.2s ease 0s;-webkit-transition:opacity 0.2s ease 0s,transform 0.2s ease 0s;transition:opacity 0.2s ease 0s,transform 0.2s ease 0s;} .fIPKnQ h5:hover .heading-anchor-wrapper button{opacity:1;-webkit-transform:none;-ms-transform:none;transform:none;width:unset;} .fIPKnQ h6 .heading-anchor-wrapper{position:absolute;width:0;height:1.4545454545454546em;} .fIPKnQ h6 .heading-anchor-wrapper button{opacity:0;-webkit-transform:translate(8px,0px);-ms-transform:translate(8px,0px);transform:translate(8px,0px);-webkit-transition:opacity 0.2s ease 0s,-webkit-transform 0.2s ease 0s;-webkit-transition:opacity 0.2s ease 0s,transform 0.2s ease 0s;transition:opacity 0.2s ease 0s,transform 0.2s ease 0s;} .fIPKnQ h6:hover .heading-anchor-wrapper button{opacity:1;-webkit-transform:none;-ms-transform:none;transform:none;width:unset;} .fIPKnQ span.akActionMark{color:#0052CC;-webkit-text-decoration:none;text-decoration:none;} .fIPKnQ span.akActionMark:hover{color:#0065FF;-webkit-text-decoration:underline;text-decoration:underline;} .fIPKnQ span.akActionMark{cursor:pointer;} .fIPKnQ blockquote{box-sizing:border-box;padding-left:16px;border-left:2px solid #DFE1E6;margin:1.143rem 0 0 0;margin-right:0;} [dir='rtl'] .fIPKnQ blockquote{padding-left:0;padding-right:16px;} .fIPKnQ blockquote:first-child{margin-top:0;} .fIPKnQ blockquote::before{content:'';} .fIPKnQ blockquote::after{content:none;} .fIPKnQ blockquote p{display:block;} .fIPKnQ blockquote table,.fIPKnQ blockquote table:last-child{display:inline-table;} .fIPKnQ h1{font-size:1.7142857142857142em;font-style:inherit;line-height:1.1666666666666667;color:#172B4D;font-weight:500;-webkit-letter-spacing:-0.01em;-moz-letter-spacing:-0.01em;-ms-letter-spacing:-0.01em;letter-spacing:-0.01em;margin-top:40px;margin-bottom:0;margin-top:1.667em;} .fIPKnQ h2{font-size:1.4285714285714286em;font-style:inherit;line-height:1.2;color:#172B4D;font-weight:500;-webkit-letter-spacing:-0.008em;-moz-letter-spacing:-0.008em;-ms-letter-spacing:-0.008em;letter-spacing:-0.008em;margin-top:28px;margin-top:1.8em;margin-bottom:0;} .fIPKnQ h3{font-size:1.1428571428571428em;font-style:inherit;line-height:1.25;color:#172B4D;font-weight:600;-webkit-letter-spacing:-0.006em;-moz-letter-spacing:-0.006em;-ms-letter-spacing:-0.006em;letter-spacing:-0.006em;margin-top:24px;margin-top:2em;margin-bottom:0;} .fIPKnQ h4{font-size:1em;font-style:inherit;line-height:1.1428571428571428;color:#172B4D;font-weight:600;-webkit-letter-spacing:-0.003em;-moz-letter-spacing:-0.003em;-ms-letter-spacing:-0.003em;letter-spacing:-0.003em;margin-top:16px;margin-top:1.357em;} .fIPKnQ h5{font-size:0.8571428571428571em;font-style:inherit;line-height:1.3333333333333333;color:#172B4D;font-weight:600;margin-top:20px;text-transform:uppercase;margin-top:1.667em;text-transform:none;} .fIPKnQ h6{font-size:0.7857142857142857em;font-style:inherit;line-height:1.4545454545454546;color:#6B778C;font-weight:700;margin-top:16px;margin-top:1.455em;text-transform:none;} .fIPKnQ .ak-editor-panel{border-radius:3px;margin:1.143rem 0 0;padding:8px;min-width:48px;display:-webkit-box;display:-webkit-flex;display:-ms-flexbox;display:flex;-webkit-align-items:baseline;-webkit-box-align:baseline;-ms-flex-align:baseline;align-items:baseline;word-break:break-word;background-color:#DEEBFF;border:none;color:inherit;} .fIPKnQ .ak-editor-panel .ak-editor-panel__icon{display:block;-webkit-flex-shrink:0;-ms-flex-negative:0;flex-shrink:0;height:24px;width:24px;box-sizing:content-box;padding-right:8px;color:#0052CC;} .fIPKnQ .ak-editor-panel .ak-editor-panel__icon > span{vertical-align:middle;display:inline;} .fIPKnQ .ak-editor-panel .ak-editor-panel__content{margin:1px 0 1px;-webkit-flex:1 0 0;-ms-flex:1 0 0;flex:1 0 0;} .fIPKnQ .ak-editor-panel[data-panel-type='note']{background-color:#EAE6FF;border:none;color:inherit;} .fIPKnQ .ak-editor-panel[data-panel-type='note'] .ak-editor-panel__icon{color:#5243AA;} .fIPKnQ .ak-editor-panel[data-panel-type='tip']{background-color:#E3FCEF;border:none;color:inherit;} .fIPKnQ .ak-editor-panel[data-panel-type='tip'] .ak-editor-panel__icon{color:#00875A;} .fIPKnQ .ak-editor-panel[data-panel-type='warning']{background-color:#FFFAE6;border:none;color:inherit;} .fIPKnQ .ak-editor-panel[data-panel-type='warning'] .ak-editor-panel__icon{color:#FF991F;} .fIPKnQ .ak-editor-panel[data-panel-type='error']{background-color:#FFEBE6;border:none;color:inherit;} .fIPKnQ .ak-editor-panel[data-panel-type='error'] .ak-editor-panel__icon{color:#DE350B;} .fIPKnQ .ak-editor-panel[data-panel-type='success']{background-color:#E3FCEF;border:none;color:inherit;} .fIPKnQ .ak-editor-panel[data-panel-type='success'] .ak-editor-panel__icon{color:#00875A;} .fIPKnQ .ak-editor-panel.danger{box-shadow:0 0 0 1px #FF5630;background:#FFEBE6 !important;} .fIPKnQ .ak-editor-panel.danger .ak-editor-panel__icon{color:#DE350B !important;} .fIPKnQ .danger .ak-editor-panel{background:rgb(255,189,173,0.5) !important;} .fIPKnQ .danger .ak-editor-panel .ak-editor-panel__icon{color:#DE350B !important;} .fIPKnQ hr{border:none;background-color:rgba(9,30,66,0.08);margin:1.714em 0;height:2px;border-radius:1px;} .fIPKnQ hr.ProseMirror-selectednode{outline:none;background-color:#0065FF;} .fIPKnQ p{font-size:1em;line-height:1.714;font-weight:normal;margin-top:1.143rem;margin-bottom:0;-webkit-letter-spacing:-0.005em;-moz-letter-spacing:-0.005em;-ms-letter-spacing:-0.005em;letter-spacing:-0.005em;} .fIPKnQ ul,.fIPKnQ ol{box-sizing:border-box;padding-left:24px;} .fIPKnQ .ak-ol,.fIPKnQ .ak-ul{display:table;display:flow-root;} .fIPKnQ ul,.fIPKnQ ul ul ul ul{list-style-type:disc;} .fIPKnQ ul ul,.fIPKnQ ul ul ul ul ul{list-style-type:circle;} .fIPKnQ ul ul ul,.fIPKnQ ul ul ul ul ul ul{list-style-type:square;} .fIPKnQ ol,.fIPKnQ ol ol ol ol{list-style-type:decimal;} .fIPKnQ ol ol,.fIPKnQ ol ol ol ol ol{list-style-type:lower-alpha;} .fIPKnQ ol ol ol,.fIPKnQ ol ol ol ol ol ol{list-style-type:lower-roman;} .fIPKnQ .fabric-editor-indentation-mark[data-level='1']{margin-left:30px;} .fIPKnQ .fabric-editor-indentation-mark[data-level='2']{margin-left:60px;} .fIPKnQ .fabric-editor-indentation-mark[data-level='3']{margin-left:90px;} .fIPKnQ .fabric-editor-indentation-mark[data-level='4']{margin-left:120px;} .fIPKnQ .fabric-editor-indentation-mark[data-level='5']{margin-left:150px;} .fIPKnQ .fabric-editor-indentation-mark[data-level='6']{margin-left:180px;} .fIPKnQ *:not(.fabric-editor-block-mark) > p:first-child,.fIPKnQ *:not(.fabric-editor-block-mark) > div.fabric-editor-block-mark:first-child p:first-child,.fIPKnQ *:not(.fabric-editor-block-mark) > h1:first-child,.fIPKnQ *:not(.fabric-editor-block-mark) > div.fabric-editor-block-mark:first-child h1:first-child,.fIPKnQ *:not(.fabric-editor-block-mark) > h2:first-child,.fIPKnQ *:not(.fabric-editor-block-mark) > div.fabric-editor-block-mark:first-child h2:first-child,.fIPKnQ *:not(.fabric-editor-block-mark) > h3:first-child,.fIPKnQ *:not(.fabric-editor-block-mark) > div.fabric-editor-block-mark:first-child h3:first-child,.fIPKnQ *:not(.fabric-editor-block-mark) > h4:first-child,.fIPKnQ *:not(.fabric-editor-block-mark) > div.fabric-editor-block-mark:first-child h4:first-child,.fIPKnQ *:not(.fabric-editor-block-mark) > h5:first-child,.fIPKnQ *:not(.fabric-editor-block-mark) > div.fabric-editor-block-mark:first-child h5:first-child,.fIPKnQ *:not(.fabric-editor-block-mark) > h6:first-child,.fIPKnQ *:not(.fabric-editor-block-mark) > div.fabric-editor-block-mark:first-child h6:first-child{margin-top:0;} .fIPKnQ span.code{font-size:11.998px;font-weight:normal;padding:2px 0px 2px 0px;background-color:rgba(9,30,66,0.08);-webkit-box-decoration-break:clone;box-decoration-break:clone;border-radius:3px;border-style:none;font-family:'SFMono-Medium','SF Mono','Segoe UI Mono','Roboto Mono','Ubuntu Mono',Menlo,Consolas,Courier,monospace;white-space:pre-wrap;margin:0 4px 0 4px;box-shadow:-4px 0 0 0 rgba(9,30,66,0.08),4px 0 0 0 rgba(9,30,66,0.08);} .fIPKnQ span.code::before,.fIPKnQ span.code::after{vertical-align:text-top;display:inline-block;content:'';} .fIPKnQ .right-shadow::before,.fIPKnQ .right-shadow::after,.fIPKnQ .left-shadow::before,.fIPKnQ .left-shadow::after{display:none;position:absolute;pointer-events:none;z-index:12;width:8px;content:'';height:calc(100%);} .fIPKnQ .right-shadow,.fIPKnQ .left-shadow{position:relative;} .fIPKnQ .left-shadow::before{background:linear-gradient( to left, rgba(99,114,130,0) 0, rgba(9,30,66,0.13) 100% );top:0px;left:0;display:block;} .fIPKnQ .right-shadow::after{background:linear-gradient( to right, rgba(99,114,130,0) 0, rgba(9,30,66,0.13) 100% );left:calc(100% - 8px);top:0px;display:block;} .fIPKnQ .date-lozenger-container{display:inline-block;} .fIPKnQ .ProseMirror .taskItemView-content-wrap,.fIPKnQ .ProseMirror .decisionItemView-content-wrap{position:relative;min-width:48px;} .fIPKnQ .ProseMirror .decisionItemView-content-wrap{margin-top:0;} .fIPKnQ div[data-task-list-local-id]{margin:12px 0 0 0;} .fIPKnQ div[data-task-list-local-id]:first-child{margin-top:0;} .fIPKnQ div[data-task-list-local-id] div[data-task-list-local-id]{margin-top:0px;margin-left:24px;} .fIPKnQ .UnknownBlock{font-family:-apple-system,BlinkMacSystemFont,'Segoe UI','Roboto','Oxygen','Ubuntu','Fira Sans','Droid Sans','Helvetica Neue',sans-serif;font-size:14;font-weight:400;white-space:pre-wrap;word-wrap:break-word;} .fIPKnQ span.date-node{background:rgba(9,30,66,0.08);border-radius:3px;color:#172B4D;padding:2px 4px;margin:0 1px;-webkit-transition:background 0.3s;transition:background 0.3s;white-space:nowrap;} .fIPKnQ span.date-node-highlighted{background:#FFEBE6;color:#BF2600;} .fIPKnQ .renderer-image{max-width:100%;display:block;margin:24px 0;} .fIPKnQ .media-single.media-wrapped + .media-single:not(.media-wrapped){clear:both;} .fIPKnQ .code-block,.fIPKnQ blockquote,.fIPKnQ hr,.fIPKnQ > div > div:not(.media-wrapped),.fIPKnQ .media-single.media-wrapped + .media-wrapped + *:not(.media-wrapped),.fIPKnQ .media-single.media-wrapped + div:not(.media-wrapped){clear:both;} .fIPKnQ .media-wrapped + h1,.fIPKnQ .media-wrapped + h2,.fIPKnQ .media-wrapped + h3,.fIPKnQ .media-wrapped + h4,.fIPKnQ .media-wrapped + h5,.fIPKnQ .media-wrapped + h6{margin-top:8px;} .fIPKnQ .fabric-editor-block-mark[data-align='end'] > h1,.fIPKnQ .fabric-editor-block-mark[data-align='center'] > h1,.fIPKnQ .fabric-editor-block-mark[data-align='right'] > h1,.fIPKnQ .fabric-editor-block-mark[data-align='end'] > h2,.fIPKnQ .fabric-editor-block-mark[data-align='center'] > h2,.fIPKnQ .fabric-editor-block-mark[data-align='right'] > h2,.fIPKnQ .fabric-editor-block-mark[data-align='end'] > h3,.fIPKnQ .fabric-editor-block-mark[data-align='center'] > h3,.fIPKnQ .fabric-editor-block-mark[data-align='right'] > h3,.fIPKnQ .fabric-editor-block-mark[data-align='end'] > h4,.fIPKnQ .fabric-editor-block-mark[data-align='center'] > h4,.fIPKnQ .fabric-editor-block-mark[data-align='right'] > h4,.fIPKnQ .fabric-editor-block-mark[data-align='end'] > h5,.fIPKnQ .fabric-editor-block-mark[data-align='center'] > h5,.fIPKnQ .fabric-editor-block-mark[data-align='right'] > h5,.fIPKnQ .fabric-editor-block-mark[data-align='end'] > h6,.fIPKnQ .fabric-editor-block-mark[data-align='center'] > h6,.fIPKnQ .fabric-editor-block-mark[data-align='right'] > h6{display:inline-block;} .fIPKnQ li .media-single{margin:0;} .fIPKnQ.ua-chrome li > .mediaSingleView-content-wrap::before{content:'';display:block;height:0;} .fIPKnQ table .media-single{margin-top:12px;margin-bottom:12px;clear:both;} .fIPKnQ .media-single.image-wrap-right + .media-single.image-wrap-left{clear:both;} .fIPKnQ .media-single.image-wrap-left + .media-single.image-wrap-right,.fIPKnQ .media-single.image-wrap-right + .media-single.image-wrap-left,.fIPKnQ .media-single.image-wrap-left + .media-single.image-wrap-left,.fIPKnQ .media-single.image-wrap-right + .media-single.image-wrap-right{margin-right:0;margin-left:0;} .fIPKnQ div[class^='image-wrap-'] + div[class^='image-wrap-']{margin-left:0;margin-right:0;} .fIPKnQ .ak-renderer-document > * .pm-table-container,.fIPKnQ .ak-renderer-document > * .ak-renderer-extension{width:100% !important;left:0 !important;} .fIPKnQ .ak-renderer-document > .ak-renderer-extension[data-layout='wide'],.fIPKnQ .ak-renderer-document > .ak-renderer-extension[data-layout='full-width']{margin-left:50%;-webkit-transform:translateX(-50%);-ms-transform:translateX(-50%);transform:translateX(-50%);} .fIPKnQ .ak-renderer-document > * .ak-renderer-extension-overflow-container{overflow-x:auto;} .fIPKnQ .pm-table-wrapper{overflow-x:auto;} .fIPKnQ .pm-table-container{position:relative;margin:0 auto 16px;box-sizing:border-box;} .fIPKnQ .pm-table-container .decisionItemView-content-wrap:first-child > div{margin-top:0;} .fIPKnQ .pm-table-container[data-number-column='true']{padding-left:41px;} .fIPKnQ .pm-table-container > table,.fIPKnQ .pm-table-wrapper > table{border-collapse:collapse;margin:24px 8px 0 0;border:1px solid #C1C7D0;table-layout:fixed;font-size:1em;width:100%;} .fIPKnQ .pm-table-container > table[data-autosize='true'],.fIPKnQ .pm-table-wrapper > table[data-autosize='true']{table-layout:auto;} .fIPKnQ .pm-table-container > table *,.fIPKnQ .pm-table-wrapper > table *{box-sizing:border-box;} .fIPKnQ .pm-table-container > table tbody,.fIPKnQ .pm-table-wrapper > table tbody{border-bottom:none;} .fIPKnQ .pm-table-container > table th td,.fIPKnQ .pm-table-wrapper > table th td{background-color:white;} .fIPKnQ .pm-table-container > table th,.fIPKnQ .pm-table-wrapper > table th,.fIPKnQ .pm-table-container > table td,.fIPKnQ .pm-table-wrapper > table td{min-width:48px;font-weight:normal;vertical-align:top;border:1px solid #C1C7D0;border-right-width:0;border-bottom-width:0;padding:8px;background-clip:padding-box;} .fIPKnQ .pm-table-container > table th > *:first-child,.fIPKnQ .pm-table-wrapper > table th > *:first-child,.fIPKnQ .pm-table-container > table td > *:first-child,.fIPKnQ .pm-table-wrapper > table td > *:first-child{margin-top:0;} .fIPKnQ .pm-table-container > table th > .ProseMirror-gapcursor.-right:first-child + *,.fIPKnQ .pm-table-wrapper > table th > .ProseMirror-gapcursor.-right:first-child + *,.fIPKnQ .pm-table-container > table td > .ProseMirror-gapcursor.-right:first-child + *,.fIPKnQ .pm-table-wrapper > table td > .ProseMirror-gapcursor.-right:first-child + *{margin-top:0;} .fIPKnQ .pm-table-container > table th > .ProseMirror-gapcursor:first-child + span + *,.fIPKnQ .pm-table-wrapper > table th > .ProseMirror-gapcursor:first-child + span + *,.fIPKnQ .pm-table-container > table td > .ProseMirror-gapcursor:first-child + span + *,.fIPKnQ .pm-table-wrapper > table td > .ProseMirror-gapcursor:first-child + span + *{margin-top:0;} .fIPKnQ .pm-table-container > table th th p:not(:first-of-type),.fIPKnQ .pm-table-wrapper > table th th p:not(:first-of-type),.fIPKnQ .pm-table-container > table td th p:not(:first-of-type),.fIPKnQ .pm-table-wrapper > table td th p:not(:first-of-type),.fIPKnQ .pm-table-container > table th td p:not(:first-of-type),.fIPKnQ .pm-table-wrapper > table th td p:not(:first-of-type),.fIPKnQ .pm-table-container > table td td p:not(:first-of-type),.fIPKnQ .pm-table-wrapper > table td td p:not(:first-of-type){margin-top:12px;} .fIPKnQ .pm-table-container > table th,.fIPKnQ .pm-table-wrapper > table th{background-color:#F4F5F7;text-align:left;} .fIPKnQ .pm-table-container > table th .code-block,.fIPKnQ .pm-table-wrapper > table th .code-block{background:rgba(9,30,66,0.04);} .fIPKnQ .pm-table-container > table th .code-block > span,.fIPKnQ .pm-table-wrapper > table th .code-block > span{background:transparent !important;} .fIPKnQ .pm-table-container{z-index:0;-webkit-transition:all 0.1s linear;transition:all 0.1s linear;display:-webkit-box;display:-webkit-flex;display:-ms-flexbox;display:flex;} .fIPKnQ .pm-table-container.right-shadow::after,.fIPKnQ .pm-table-container.left-shadow::before{top:23px;height:calc(100% - 24px);z-index:12;} .fIPKnQ .pm-table-container table{margin-left:0;margin-right:0;} .fIPKnQ .pm-table-container table .ak-renderer-tableHeader-sortable-column{cursor:pointer;} .fIPKnQ .pm-table-container table .ak-renderer-tableHeader-sortable-column.ak-renderer-tableHeader-sortable-column__not-allowed{cursor:default;} .fIPKnQ .pm-table-container table .ak-renderer-tableHeader-sortable-column .ak-renderer-tableHeader-sorting-icon{margin:0;opacity:1;-webkit-transition:opacity 0.2s ease-in-out;transition:opacity 0.2s ease-in-out;} .fIPKnQ .pm-table-container table .ak-renderer-tableHeader-sortable-column .ak-renderer-tableHeader-sorting-icon__no-order{opacity:0;} .fIPKnQ .pm-table-container table .ak-renderer-tableHeader-sortable-column:hover .ak-renderer-tableHeader-sorting-icon__no-order{opacity:1;} .fIPKnQ .pm-table-container table tr:first-child td,.fIPKnQ .pm-table-container table tr:first-child th{position:relative;} .fIPKnQ .pm-table-container table[data-number-column='true'] .ak-renderer-table-number-column{background-color:#F4F5F7;border-right:1px solid #C1C7D0;width:42px;text-align:center;color:#6B778C;font-size:14px;} .fIPKnQ .pm-table-container table[data-number-column='true'] .fixed .ak-renderer-table-number-column{border-right:0px none;} .fIPKnQ tr[data-header-row].fixed{position:fixed !important;display:-webkit-box;display:-webkit-flex;display:-ms-flexbox;display:flex;overflow:hidden;z-index:11;border-right:1px solid #C1C7D0;border-bottom:1px solid #C1C7D0;-webkit-transform:translateX(-1px);-ms-transform:translateX(-1px);transform:translateX(-1px);} .fIPKnQ .sticky > th{z-index:11;position:-webkit-sticky !important;position:sticky !important;top:0;} .fIPKnQ .sticky > td{position:-webkit-sticky !important;position:sticky !important;top:0;} .fIPKnQ .sticky th,.fIPKnQ .sticky td{box-shadow:0px 1px #C1C7D0,0px -0.5px #C1C7D0,inset -1px 0px #F4F5F7,0px -1px #F4F5F7;} .fIPKnQ .fixed + tr{min-height:0px;} .fIPKnQ .code-block{max-width:100%;display:-ms-grid;display:grid;-ms-grid-columns:auto 1fr;grid-template-columns:minmax(0,1fr);position:relative;word-wrap:normal;} .fIPKnQ .code-block > span{-ms-grid-row:1;-ms-grid-column:2;grid-column:1;} .fIPKnQ .MediaGroup,.fIPKnQ .code-block{margin-top:1.143rem;} .fIPKnQ .MediaGroup:first-child,.fIPKnQ .code-block:first-child{margin-top:0;} .fIPKnQ [data-layout-section]{display:-webkit-box;display:-webkit-flex;display:-ms-flexbox;display:flex;-webkit-flex-direction:row;-ms-flex-direction:row;flex-direction:row;} .fIPKnQ [data-layout-section] > *{-webkit-flex:1;-ms-flex:1;flex:1;min-width:0;} @media screen and (max-width:1024px){.fIPKnQ [data-layout-section]{-webkit-flex-direction:column;-ms-flex-direction:column;flex-direction:column;}} .fIPKnQ [data-layout-section]{margin-top:20px;} .fIPKnQ [data-layout-section] > div + div{margin-left:32px;} @media screen and (max-width:1024px){.fIPKnQ [data-layout-section] > div + div{margin-left:0;}} /* sc-component-id: sc-fyjhYU */ .dNlTAn{-webkit-transition:all 0.1s linear;transition:all 0.1s linear;} .dNlTAn .ak-editor-media-link{-webkit-align-items:center;-webkit-box-align:center;-ms-flex-align:center;align-items:center;-webkit-box-pack:center;-webkit-justify-content:center;-ms-flex-pack:center;justify-content:center;} @media (any-hover:hover){.dNlTAn .ak-editor-media-link{width:20px;height:20px;}.dNlTAn .ak-editor-media-link span[role='img']{width:initial;height:initial;}.dNlTAn .ak-editor-media-link span[role='img'] > svg{width:24px;height:24px;}.dNlTAn:not(:hover) .ak-editor-media-link{opacity:0;}.dNlTAn:focus-within .ak-editor-media-link{opacity:1;}} @media (pointer:none){.dNlTAn .ak-editor-media-link{width:36px;height:36px;}} /* sc-component-id: sc-eIHaNI */ .fVLHZh{color:#0052CC;} .fVLHZh:hover{color:#0065FF;-webkit-text-decoration:underline;text-decoration:underline;} /* sc-component-id: sc-keyframes-bcCCNc */ @-webkit-keyframes bcCCNc{0%{opacity:0;}100%{opacity:1;}} @keyframes bcCCNc{0%{opacity:0;}100%{opacity:1;}} /* sc-component-id: sc-keyframes-jqBRrP */ @-webkit-keyframes jqBRrP{0%{opacity:1;}50%{opacity:0.6;}100%{opacity:1;}} @keyframes jqBRrP{0%{opacity:1;}50%{opacity:0.6;}100%{opacity:1;}} /* sc-component-id: sc-keyframes-kULDQW */ @-webkit-keyframes kULDQW{0%{-webkit-transform:scale(0);-ms-transform:scale(0);transform:scale(0);}50%{-webkit-transform:scale(1.1);-ms-transform:scale(1.1);transform:scale(1.1);}100%{-webkit-transform:scale(1);-ms-transform:scale(1);transform:scale(1);}} @keyframes kULDQW{0%{-webkit-transform:scale(0);-ms-transform:scale(0);transform:scale(0);}50%{-webkit-transform:scale(1.1);-ms-transform:scale(1.1);transform:scale(1.1);}100%{-webkit-transform:scale(1);-ms-transform:scale(1);transform:scale(1);}} /* sc-component-id: sc-keyframes-ktEnzR */ @-webkit-keyframes ktEnzR{to{visibility:hidden;}} @keyframes ktEnzR{to{visibility:hidden;}} /* sc-component-id: sc-keyframes-lljZNu */ @-webkit-keyframes lljZNu{50%{background-color:#FF8F73;}} @keyframes lljZNu{50%{background-color:#FF8F73;}} /* sc-component-id: sc-keyframes-kUYcyx */ @-webkit-keyframes kUYcyx{0%{background-color:#FF8F73;}50%{background-color:auto;}100%{background-color:#FF8F73;}} @keyframes kUYcyx{0%{background-color:#FF8F73;}50%{background-color:auto;}100%{background-color:#FF8F73;}} /* sc-component-id: sc-goFBvh */ .jklceZ{display:-webkit-box;display:-webkit-flex;display:-ms-flexbox;display:flex;-webkit-align-items:center;-webkit-box-align:center;-ms-flex-align:center;align-items:center;-webkit-box-pack:center;-webkit-justify-content:center;-ms-flex-pack:center;justify-content:center;background:#F4F5F7;color:#C1C7D0;border-radius:3px;max-height:100%;max-width:100%;width:0px;height:0px;} .jklceZ > span{-webkit-animation:jqBRrP 0.8s infinite;animation:jqBRrP 0.8s infinite;} /* sc-component-id: sc-eBipZS */ .jqZvvE{line-height:1.1428571428571428;padding:0px 0.24em 2px 0.24em;display:inline;-webkit-box-decoration-break:clone;box-decoration-break:clone;border-radius:3px;-webkit-user-select:text;-moz-user-select:text;-ms-user-select:text;user-select:text;-webkit-transition:0.3s all ease-in-out;transition:0.3s all ease-in-out;}</style> <link rel="stylesheet" href="/resources/main.css">   <script type="text/javascript"> var loadExternalJS = function(url, location, callback){ var scriptTag = document.createElement('script'); scriptTag.src = url; scriptTag.type = 'text/javascript'; // Then bind the event to the callback function. // There are several events for cross browser compatibility. scriptTag.onreadystatechange = callback; scriptTag.onload = callback; // Fire the loading location.appendChild(scriptTag); }; </script> <script> function initializeATLAnalytics() { window.dispatchEvent(new CustomEvent('initanalytics')); } </script> <script type="text/plain" class="optanon-category-2"> loadExternalJS("https://atl-global.atlassian.com/js/atl-global.min.js", document.body, initializeATLAnalytics); </script>  <script src="/resources/runtime.374dd4dd521789bd032b.bundle.js"></script> <script src="/resources/vendor.39c1e05b8fb6d171b8b6.bundle.js"></script> <script src="/resources/main.bef63359e90d9f96a31f.bundle.js"></script> </head> <body> <div id="root"><div class="topic section-page flex-column-page" data-testid="page-template"><div class="content"><div class="header-components" data-testid="global_header" data-event-container="globalHeader"><div><script data-app="bannerman" data-site-key="support-atlassian-com"></script><div id="bannerman"></div></div><header class="header"><div class="header__inner-container"><div class="header__inner-content"><div class="header__nav" data-testid="page-header" data-event-container="pageHeader"><div class="header__nav--logo"><div data-testid="waffle_menu" class="header__nav-item header__nav-item--waffle" role="button" tabindex="0" aria-label="Open products dropdown"><span class="Icon__IconWrapper-dyhwwi-0 bcqBjl" aria-label="Products Dropdown"><svg width="24" height="24" viewBox="0 0 24 24" focusable="false" role="presentation"><path fill="currentColor" fill-rule="evenodd" d="M4 5.01C4 4.451 4.443 4 5.01 4h1.98C7.549 4 8 4.443 8 5.01v1.98C8 7.549 7.557 8 6.99 8H5.01C4.451 8 4 7.557 4 6.99V5.01zm0 6c0-.558.443-1.01 1.01-1.01h1.98c.558 0 1.01.443 1.01 1.01v1.98C8 13.549 7.557 14 6.99 14H5.01C4.451 14 4 13.557 4 12.99v-1.98zm6-6c0-.558.443-1.01 1.01-1.01h1.98c.558 0 1.01.443 1.01 1.01v1.98C14 7.549 13.557 8 12.99 8h-1.98C10.451 8 10 7.557 10 6.99V5.01zm0 6c0-.558.443-1.01 1.01-1.01h1.98c.558 0 1.01.443 1.01 1.01v1.98c0 .558-.443 1.01-1.01 1.01h-1.98c-.558 0-1.01-.443-1.01-1.01v-1.98zm6-6c0-.558.443-1.01 1.01-1.01h1.98c.558 0 1.01.443 1.01 1.01v1.98C20 7.549 19.557 8 18.99 8h-1.98C16.451 8 16 7.557 16 6.99V5.01zm0 6c0-.558.443-1.01 1.01-1.01h1.98c.558 0 1.01.443 1.01 1.01v1.98c0 .558-.443 1.01-1.01 1.01h-1.98c-.558 0-1.01-.443-1.01-1.01v-1.98zm-12 6c0-.558.443-1.01 1.01-1.01h1.98c.558 0 1.01.443 1.01 1.01v1.98C8 19.549 7.557 20 6.99 20H5.01C4.451 20 4 19.557 4 18.99v-1.98zm6 0c0-.558.443-1.01 1.01-1.01h1.98c.558 0 1.01.443 1.01 1.01v1.98c0 .558-.443 1.01-1.01 1.01h-1.98c-.558 0-1.01-.443-1.01-1.01v-1.98zm6 0c0-.558.443-1.01 1.01-1.01h1.98c.558 0 1.01.443 1.01 1.01v1.98c0 .558-.443 1.01-1.01 1.01h-1.98c-.558 0-1.01-.443-1.01-1.01v-1.98z"/></svg></span></div><a href="/" data-testid="atlas_link" class="header__nav-title"><h2 data-testid="header-support-link">Atlassian Support</h2></a></div><div class="header__nav--primary"><ul class="header__nav-list"><li style="display:none"><div data-testid="products-dropdown-button" aria-expanded="false" class="header__nav-item" role="button" tabindex="0" aria-label="products"><span data-testid="products-dropdown">Products </span><span class="Icon__IconWrapper-dyhwwi-0 bcqBjl" aria-label="products"><svg width="24" height="24" viewBox="0 0 24 24" focusable="false" role="presentation"><path d="M8.292 10.293a1.009 1.009 0 0 0 0 1.419l2.939 2.965c.218.215.5.322.779.322s.556-.107.769-.322l2.93-2.955a1.01 1.01 0 0 0 0-1.419.987.987 0 0 0-1.406 0l-2.298 2.317-2.307-2.327a.99.99 0 0 0-1.406 0z" fill="currentColor" fill-rule="evenodd"/></svg></span></div></li><li><div class="header__nav-item" role="button" tabindex="0" aria-label="documentation" data-testid="documentation-dropdown"><span>Documentation</span><span class="Icon__IconWrapper-dyhwwi-0 bcqBjl" aria-label="Documentation Dropdown"><svg width="24" height="24" viewBox="0 0 24 24" focusable="false" role="presentation"><path d="M8.292 10.293a1.009 1.009 0 0 0 0 1.419l2.939 2.965c.218.215.5.322.779.322s.556-.107.769-.322l2.93-2.955a1.01 1.01 0 0 0 0-1.419.987.987 0 0 0-1.406 0l-2.298 2.317-2.307-2.327a.99.99 0 0 0-1.406 0z" fill="currentColor" fill-rule="evenodd"/></svg></span></div></li><li><div aria-expanded="false" class="header__nav-item" role="button" tabindex="0" aria-label="resources"><span data-testid="resources-dropdown">Resources</span><span class="Icon__IconWrapper-dyhwwi-0 bcqBjl" aria-label="Resources Dropdown"><svg width="24" height="24" viewBox="0 0 24 24" focusable="false" role="presentation"><path d="M8.292 10.293a1.009 1.009 0 0 0 0 1.419l2.939 2.965c.218.215.5.322.779.322s.556-.107.769-.322l2.93-2.955a1.01 1.01 0 0 0 0-1.419.987.987 0 0 0-1.406 0l-2.298 2.317-2.307-2.327a.99.99 0 0 0-1.406 0z" fill="currentColor" fill-rule="evenodd"/></svg></span></div></li></ul></div></div><div class="header__nav--secondary"><ul class="header__nav-list"><li><div class="header__nav-item contact-btn"><a href="" data-testid="contact-button">Contact</a></div></li><li><div data-testid="search_button" class="header__nav-item header__nav-item--icon header__nav-item--search-icon" role="button" tabindex="0" aria-label="Open search page"><span class="Icon__IconWrapper-dyhwwi-0 ieACwX" aria-label="Search Page"><svg width="24" height="24" viewBox="0 0 24 24" focusable="false" role="presentation"><path d="M16.436 15.085l3.94 4.01a1 1 0 0 1-1.425 1.402l-3.938-4.006a7.5 7.5 0 1 1 1.423-1.406zM10.5 16a5.5 5.5 0 1 0 0-11 5.5 5.5 0 0 0 0 11z" fill="currentColor" fill-rule="evenodd"/></svg></span></div></li><li><div class="header__nav-item account-btn-wrapper"><div class="account__login-btn"><a href="" data-testid="login-button">Log in</a></div></div></li><li><div class="header__nav-item header__nav-item--icon header__nav-item--dropdown-button" role="button" tabindex="0" aria-label="Open dropdown"><span class="Icon__IconWrapper-dyhwwi-0 bcqBjl" aria-label="Dropdown Not Open"><svg width="24" height="24" viewBox="0 0 24 24" focusable="false" role="presentation"><g fill="currentColor" fill-rule="evenodd"><circle cx="5" cy="12" r="2"/><circle cx="12" cy="12" r="2"/><circle cx="19" cy="12" r="2"/></g></svg></span></div></li></ul></div><div class="header__nav--mobile"><ul class="header__nav-list"><li><div class="header__nav-item header__nav-item--icon header__nav-item--search-icon" role="button" tabindex="0" aria-label="Open search page"><span class="Icon__IconWrapper-dyhwwi-0 bcqBjl" aria-label="Open search page"><svg width="24" height="24" viewBox="0 0 24 24" focusable="false" role="presentation"><path d="M16.436 15.085l3.94 4.01a1 1 0 0 1-1.425 1.402l-3.938-4.006a7.5 7.5 0 1 1 1.423-1.406zM10.5 16a5.5 5.5 0 1 0 0-11 5.5 5.5 0 0 0 0 11z" fill="currentColor" fill-rule="evenodd"/></svg></span></div></li><li><div class="header__nav-item account-btn-wrapper"><div class="account__login-btn"><a href="" data-testid="login-button">Log in</a></div></div></li><li><div class="header__nav-item header__nav-item--icon" role="button" tabindex="0" aria-label="Open dropdown"><span class="Icon__IconWrapper-dyhwwi-0 bcqBjl" aria-label="Open Dropdown"><svg width="24" height="24" viewBox="0 0 24 24" focusable="false" role="presentation"><g fill="currentColor" fill-rule="evenodd"><circle cx="5" cy="12" r="2"/><circle cx="12" cy="12" r="2"/><circle cx="19" cy="12" r="2"/></g></svg></span></div></li></ul></div></div></div></header><div data-focus-lock-disabled="false"><div data-testid="dropdown_menu" class="dropdown hide-dropdown"><div class="dropdown__inner-container"><div class="dropdown__main-content-wrapper dropdown__card-styling"><div class="dropdown__main-content dropdown__products hidden" data-testid="dropdown_products"><div class="sc-jTzLTM fjMiSz"><div class="sc-jzJRlG byHcWR"><span class="sc-kAzzGY emQnmn"></span><div class="sc-cSHVUG dJbcJh" role="tablist"><div class="sc-chPdSV iLptLB" aria-posinset="1" aria-selected="true" aria-setsize="2" role="tab" tabindex="0">Cloud<span class="sc-kAzzGY fffDij"></span></div><div class="sc-chPdSV bTsvjP" aria-posinset="2" aria-selected="false" aria-setsize="2" role="tab" tabindex="-1">Data Center</div></div></div><div class="sc-fjdhpX dcQPEg" role="tabpanel"><div><ul class="product-list-wrapper"><li><a href="/jira-software-cloud/" data-testid="product-card-3yydXRuQ88gGCKOyYsAGaU" class="products__link product-card"><img src="https://images.ctfassets.net/zsv3d0ugroxu/3tdm6nuuJrPlizPLgkWqZ5/d0a7942804abf2f8f6737197be1fc7f4/logo-light_Jira_mark_brand_RGB.svg" alt="" height="95" width="95" class="icon-image" data-testid="product-img-3yydXRuQ88gGCKOyYsAGaU"/><p class="product-title-text">Jira Software</p></a></li><li><a href="/jira-service-management-cloud/" data-testid="product-card-1gXBh54v1sayA6w8yowM8u" class="products__link product-card"><img src="https://images.ctfassets.net/zsv3d0ugroxu/5DppKv8q5q206zQzIRDKQq/f31b8874021ee7d6dd54389f902b1421/logo-light_Jira-Service-Management_mark_brand_RGB.svg" alt="" height="95" width="95" class="icon-image" data-testid="product-img-1gXBh54v1sayA6w8yowM8u"/><p class="product-title-text">Jira Service Management</p></a></li><li><a href="/confluence-cloud/" data-testid="product-card-4z1mIelYHYwE6ugCuqEg0y" class="products__link product-card"><img src="https://images.ctfassets.net/zsv3d0ugroxu/5VucmXIhBRYyBXA9ygFJ3Y/5082d769a81934af185dcf109b29f628/logo-light_Confluence_mark_brand_RGB.svg" alt="" height="95" width="95" class="icon-image" data-testid="product-img-4z1mIelYHYwE6ugCuqEg0y"/><p class="product-title-text">Confluence</p></a></li><li><a href="/bitbucket-cloud/" data-testid="product-card-UhZk1Nq8UMkcuUsy6sI4C" class="products__link product-card"><img src="https://images.ctfassets.net/zsv3d0ugroxu/1g4197x84jic8a1P3b3IGT/1a752272b12824d3a3df4bc1e7dd2c53/logo-light_Bitbucket_mark_brand_RGB.svg" alt="" height="95" width="95" class="icon-image" data-testid="product-img-UhZk1Nq8UMkcuUsy6sI4C"/><p class="product-title-text">Bitbucket</p></a></li><li><a href="/trello/" data-testid="product-card-7aO3e0I67vVoQJXGXm2pjr" class="products__link product-card"><img src="https://images.ctfassets.net/zsv3d0ugroxu/1j6nvsJ8txgcxgy3Vmk4aO/e3b6d56c299ae744c2f4b8109cf1a482/logo-light_Trello_mark_brand_RGB.svg" alt="" height="95" width="95" class="icon-image" data-testid="product-img-7aO3e0I67vVoQJXGXm2pjr"/><p class="product-title-text">Trello</p></a></li></ul><button class="products-toggle__button sc-jKJlTe eAxjKI" spacing="default" type="button"><span style="align-self:center;display:inline-flex;flex-wrap:nowrap;max-width:100%;position:relative"><span style="align-items:center;align-self:center;flex:1 1 auto;margin:0 4px;max-width:100%;overflow:hidden;text-overflow:ellipsis;white-space:nowrap;transition:opacity 0.3s;opacity:1">See all other products</span></span></button></div></div></div></div><div class="dropdown__main-content hide-dropdown reduced-spacing" data-testid="dropdown_documentation"><div data-testid="topic-card" class="cards margin-top-medium documentation-dropdown "><ul class="cards__inner"><li data-testid="card_item" class="cards__item cards__item--third-width documentation-card"><article><a href="/provisioning-users/docs/provision-and-sync-users-from-an-identity-provider/" data-testid="atlas_link" class="cards__link"><div class="cards__main"><header><div class="cards__title-container"><p class="cards__title">Provision and sync users from an identity provider</p></div></header><p class="cards__body margin-top-small">Make changes in your identity provider to users and groups and sync them to your Atlassian organization.</p></div></a></article></li><li data-testid="card_item" class="cards__item cards__item--third-width documentation-card"><article><a href="/provisioning-users/docs/provision-and-sync-users-from-g-suite/" data-testid="atlas_link" class="cards__link"><div class="cards__main"><header><div class="cards__title-container"><p class="cards__title">Provision and sync users from Google Workspace</p></div></header><p class="cards__body margin-top-small">Connect, manage, sync, and deactivate Google Workspace user accounts for your Atlassian organization.</p></div></a></article></li><li data-testid="card_item" class="cards__item cards__item--third-width documentation-card"><article><a href="/provisioning-users/docs/connect-identity-providers-to-your-organization/" data-testid="atlas_link" class="cards__link"><div class="cards__main"><header><div class="cards__title-container"><p class="cards__title">Connect identity providers to your organization</p></div></header><p class="cards__body margin-top-small">Connect identity providers to manage and secure users.</p></div></a></article></li><li data-testid="card_item" class="cards__item cards__item--third-width documentation-card"><article><a href="/provisioning-users/docs/provision-and-sync-users-from-microsoft-azure-ad/" data-testid="atlas_link" class="cards__link"><div class="cards__main"><header><div class="cards__title-container"><p class="cards__title"> Provision and sync users from Microsoft Azure AD</p></div></header><p class="cards__body margin-top-small">Connect, manage, and sync Microsoft Azure AD groups and users to your Atlassian organization.</p></div></a></article></li></ul></div></div><div class="dropdown__main-content hidden" data-testid="dropdown_resources"><div data-testid="topic-card" class="cards margin-top-medium dropdown__resources "><ul class="cards__inner"><li data-testid="card_item" class="cards__item "><article><a href="https://community.atlassian.com" data-testid="atlas_link" class="cards__link"><div class="cards__icon"><img data-testid="card_icon" src="https://images.ctfassets.net/zsv3d0ugroxu/199clY7qv6MQc2EasKkGim/b94d340fd8cfd453784e97b3a8c547ed/rich_icon-Community.svg" height="40" width="40" alt=""/></div><div class="cards__main"><header><div class="cards__title-container"><p class="cards__title">Community</p></div></header><p class="cards__body margin-top-small">Answers, support and inspiration</p></div></a></article></li><li data-testid="card_item" class="cards__item "><article><a href="https://status.atlassian.com/" data-testid="atlas_link" class="cards__link"><div class="cards__icon"><img data-testid="card_icon" src="https://images.ctfassets.net/zsv3d0ugroxu/mNCBZvDshqueq0EeKmise/94d904fbd231bfc5c90cf3bbee00a855/speedometer_Light_mode_spot.svg" height="40" width="40" alt=""/></div><div class="cards__main"><header><div class="cards__title-container"><p class="cards__title">System Status</p></div></header><p class="cards__body margin-top-small">Cloud services health</p></div></a></article></li><li data-testid="card_item" class="cards__item "><article><a href="https://jira.atlassian.com/secure/Dashboard.jspa?selectPageId=10440" data-testid="atlas_link" class="cards__link"><div class="cards__icon"><img data-testid="card_icon" src="https://images.ctfassets.net/zsv3d0ugroxu/4LAr0Xsaq4gUk60Uy6eYwk/e86fd54ec59e9b7e64516f3a0eb5aeb5/rich_icon-Lightbulb.svg" height="40" width="40" alt=""/></div><div class="cards__main"><header><div class="cards__title-container"><p class="cards__title">Suggestions and bugs</p></div></header><p class="cards__body margin-top-small">Feature suggestions and bug reports</p></div></a></article></li><li data-testid="card_item" class="cards__item "><article><a href="https://marketplace.atlassian.com/" data-testid="atlas_link" class="cards__link"><div class="cards__icon"><img data-testid="card_icon" src="https://images.ctfassets.net/zsv3d0ugroxu/1ss3lke3aYcVp07USZwdMY/b9c86efbf54d4ce96607262a7cb3b3ef/rich_icon-Integration.svg" height="40" width="40" alt=""/></div><div class="cards__main"><header><div class="cards__title-container"><p class="cards__title">Marketplace</p></div></header><p class="cards__body margin-top-small">Product apps</p></div></a></article></li><li data-testid="card_item" class="cards__item "><article><a href="https://www.atlassian.com/licensing/purchase-licensing" data-testid="atlas_link" class="cards__link"><div class="cards__icon"><img data-testid="card_icon" src="https://images.ctfassets.net/zsv3d0ugroxu/5Cb1EEBbNKkm8uK24mIeEs/9ad6432e9652bd788ebf619c4d242cb5/rich_icon-Credit_cards.svg" height="40" width="40" alt=""/></div><div class="cards__main"><header><div class="cards__title-container"><p class="cards__title">Billing and licensing</p></div></header><p class="cards__body margin-top-small">Frequently asked questions</p></div></a></article></li></ul></div></div><div data-testid="mobile_dropdown" class="dropdown__mobile-list "><div data-testid="mobile_dropdown_item_products" class="dropdown__mobile-item" role="button" aria-label="Trigger products dropdown" tabindex="0"><span>Products</span><span class="Icon__IconWrapper-dyhwwi-0 bcqBjl" aria-label="Products"><svg width="24" height="24" viewBox="0 0 24 24" focusable="false" role="presentation"><path d="M10.294 9.698a.988.988 0 0 1 0-1.407 1.01 1.01 0 0 1 1.419 0l2.965 2.94a1.09 1.09 0 0 1 0 1.548l-2.955 2.93a1.01 1.01 0 0 1-1.42 0 .988.988 0 0 1 0-1.407l2.318-2.297-2.327-2.307z" fill="currentColor" fill-rule="evenodd"/></svg></span></div><div data-testid="mobile_dropdown_item_documentation" class="dropdown__mobile-item" role="button" aria-label="Trigger documentation dropdown" tabindex="0"><span>Documentation</span><span class="Icon__IconWrapper-dyhwwi-0 bcqBjl" aria-label="Documentation"><svg width="24" height="24" viewBox="0 0 24 24" focusable="false" role="presentation"><path d="M10.294 9.698a.988.988 0 0 1 0-1.407 1.01 1.01 0 0 1 1.419 0l2.965 2.94a1.09 1.09 0 0 1 0 1.548l-2.955 2.93a1.01 1.01 0 0 1-1.42 0 .988.988 0 0 1 0-1.407l2.318-2.297-2.327-2.307z" fill="currentColor" fill-rule="evenodd"/></svg></span></div><div data-testid="mobile_dropdown_item_resources" class="dropdown__mobile-item" role="button" aria-label="Trigger resources dropdown" tabindex="0"><span>Resources</span><span class="Icon__IconWrapper-dyhwwi-0 bcqBjl" aria-label="Resources"><svg width="24" height="24" viewBox="0 0 24 24" focusable="false" role="presentation"><path d="M10.294 9.698a.988.988 0 0 1 0-1.407 1.01 1.01 0 0 1 1.419 0l2.965 2.94a1.09 1.09 0 0 1 0 1.548l-2.955 2.93a1.01 1.01 0 0 1-1.42 0 .988.988 0 0 1 0-1.407l2.318-2.297-2.327-2.307z" fill="currentColor" fill-rule="evenodd"/></svg></span></div></div></div><div class="dropdown__side-content dropdown__card-styling" data-testid="dropdown-side-content"><ul class="nav-links__list"><li data-testid="dropdown_item" class="nav-links__item--icon"><span class="Icon__IconWrapper-dyhwwi-0 bcqBjl" aria-label="login avatar icon"><svg width="24" height="24" viewBox="0 0 24 24" focusable="false" role="presentation"><g fill-rule="evenodd"><circle fill="currentColor" cx="12" cy="12" r="10"/><circle fill="inherit" cx="12" cy="9" r="3"/><path d="M7 18.245A7.966 7.966 0 0 0 12 20c1.892 0 3.63-.657 5-1.755V15c0-1.115-.895-2-2-2H9c-1.113 0-2 .895-2 2v3.245z" fill="inherit" fill-rule="nonzero"/></g></svg></span><a href=""><span>Log in to account</span></a></li><li data-testid="dropdown_item" class="nav-links__item--icon nav-links__item--contact"><span class="Icon__IconWrapper-dyhwwi-0 bcqBjl" aria-label="question mark icon"><svg width="24" height="24" viewBox="0 0 24 24" focusable="false" role="presentation"><g fill-rule="evenodd"><circle fill="currentColor" cx="12" cy="12" r="10"/><circle fill="inherit" cx="12" cy="18" r="1"/><path d="M15.89 9.05a3.975 3.975 0 0 0-2.957-2.942C10.321 5.514 8.017 7.446 8 9.95l.005.147a.992.992 0 0 0 .982.904c.552 0 1-.447 1.002-.998a2.004 2.004 0 0 1 4.007-.002c0 1.102-.898 2-2.003 2H12a1 1 0 0 0-1 .987v2.014a1.001 1.001 0 0 0 2.004 0v-.782c0-.217.145-.399.35-.472A3.99 3.99 0 0 0 15.89 9.05" fill="inherit"/></g></svg></span><a href="" data-testid="atlas_link"><span>Contact support</span></a></li><li data-testid="dropdown_item" class="nav-links__item"><a href="https://www.atlassian.com/university" data-testid="atlas_link"><span>Training & Certification</span></a></li><li data-testid="dropdown_item" class="nav-links__item"><a href="https://www.atlassian.com/cloud-migration" data-testid="atlas_link"><span>Atlassian Migration Program</span></a></li><li data-testid="dropdown_item" class="nav-links__item"><a href="https://confluence.atlassian.com/gdpr" data-testid="atlas_link"><span>GDPR guides</span></a></li><li data-testid="dropdown_item" class="nav-links__item"><a href="https://www.atlassian.com/enterprise/services" data-testid="atlas_link"><span>Enterprise services</span></a></li><li data-testid="dropdown_item" class="nav-links__item"><a href="https://www.atlassian.com/partners" data-testid="atlas_link"><span>Atlassian Partners</span></a></li><li data-testid="dropdown_item" class="nav-links__item"><a href="https://developer.atlassian.com" data-testid="atlas_link"><span>Developers</span></a></li><li data-testid="dropdown_item" class="nav-links__item"><a href="https://success.atlassian.com" data-testid="atlas_link"><span>Success Central</span></a></li><li data-testid="dropdown_item" class="nav-links__item"><a href="http://aug.atlassian.com" data-testid="atlas_link"><span>User groups</span></a></li><li data-testid="dropdown_item" class="nav-links__item"><a href="https://support.atlassian.com/cloud-automation/docs/jira-cloud-automation/" data-testid="atlas_link"><span>Automation for Jira</span></a></li><li data-testid="dropdown_item" class="nav-links__item--wac"><a href="http://www.atlassian.com" data-testid="atlas_link"><span>Atlassian.com</span></a></li></ul></div></div></div></div></div><div class="main-content-container flex-container margin-top-medium"><aside class=""><div class="pagetree-expander" data-testid="pagetree-expander" role="button" tabindex="0" aria-label="open page tree"><span class="Icon__IconWrapper-dyhwwi-0 bcqBjl" aria-label=""><svg width="24" height="24" viewBox="0 0 24 24" focusable="false" role="presentation"><path d="M7 7h10a1 1 0 0 1 0 2H7a1 1 0 1 1 0-2zm0 4h10a1 1 0 0 1 0 2H7a1 1 0 0 1 0-2zm0 4h5a1 1 0 0 1 0 2H7a1 1 0 0 1 0-2z" fill="currentColor" fill-rule="evenodd"/></svg></span></div><div class="pagetree pagetree--hidden" data-testid="pagetree"><div class="pagetree__inner"><div class="pagetree__context"><div data-testid="pagetree-back-arrow" class="pagetree__back-arrow" role="button" aria-label="close page tree" tabindex="0"><span class="Icon__IconWrapper-dyhwwi-0 bcqBjl" aria-label=""><svg width="24" height="24" viewBox="0 0 24 24" focusable="false" role="presentation"><path d="M8.414 11.5H18a1 1 0 0 1 0 2H8.414l3.793 3.793a1 1 0 0 1-1.414 1.414l-5.5-5.5a1 1 0 0 1 0-1.414l5.5-5.5a1 1 0 0 1 1.414 1.414L8.414 11.5z" fill="currentColor" fill-rule="evenodd"/></svg></span></div><img class="pagetree__icon" alt="Provisioning users" height="40" width="40"/><div><a href="/provisioning-users/resources/" class="pagetree__title" data-testid="pagetree-title" data-event-container="pagetree" data-event-component="pagetreeTitle" data-track-event="clicked">Provisioning users</a><p class="pagetree__subhead">Documentation</p></div></div><ul class="pagetree__list pagetree__list--root"><li class="pagetree__item pagetree__item--current-child-list"><div data-testid="pagetree-item-expander" class="pagetree__expander pagetree__expander--expanded" role="button" tabindex="0" aria-expanded="true" aria-label="collapse page tree item"><span class="Icon__IconWrapper-dyhwwi-0 bcqBjl" aria-label=""><svg width="24" height="24" viewBox="0 0 24 24" focusable="false" role="presentation"><path d="M10.294 9.698a.988.988 0 0 1 0-1.407 1.01 1.01 0 0 1 1.419 0l2.965 2.94a1.09 1.09 0 0 1 0 1.548l-2.955 2.93a1.01 1.01 0 0 1-1.42 0 .988.988 0 0 1 0-1.407l2.318-2.297-2.327-2.307z" fill="currentColor" fill-rule="evenodd"/></svg></span></div><a href="/provisioning-users/docs/provision-and-sync-users-from-an-identity-provider/" data-testid="atlas_link">Provision and sync users from an identity provider</a><ul class="pagetree__list false"><li class="pagetree__item pagetree__item--current-item"><div data-testid="pagetree-item-expander" class="pagetree__expander pagetree__expander--expanded pagetree__expander--current" role="button" tabindex="-1" aria-expanded="true" aria-label=""><span class="Icon__IconWrapper-dyhwwi-0 bcqBjl" aria-label=""><svg width="24" height="24" viewBox="0 0 24 24" focusable="false" role="presentation"><circle cx="12" cy="12" r="5" fill="currentColor" fill-rule="evenodd"/></svg></span></div><a href="/provisioning-users/docs/understand-user-provisioning/" data-testid="atlas_link">Understand user provisioning</a></li><li class="pagetree__item "><div data-testid="pagetree-item-expander" class="pagetree__expander" role="button" tabindex="0" aria-expanded="false" aria-label="expand page tree item"><span class="Icon__IconWrapper-dyhwwi-0 bcqBjl" aria-label=""><svg width="24" height="24" viewBox="0 0 24 24" focusable="false" role="presentation"><path d="M10.294 9.698a.988.988 0 0 1 0-1.407 1.01 1.01 0 0 1 1.419 0l2.965 2.94a1.09 1.09 0 0 1 0 1.548l-2.955 2.93a1.01 1.01 0 0 1-1.42 0 .988.988 0 0 1 0-1.407l2.318-2.297-2.327-2.307z" fill="currentColor" fill-rule="evenodd"/></svg></span></div><a href="/provisioning-users/docs/configure-user-provisioning/" data-testid="atlas_link">Configure user provisioning</a><ul class="pagetree__list false" style="display:none"><li class="pagetree__item "><a href="/provisioning-users/docs/configure-user-provisioning-with-an-identity-provider/" data-testid="atlas_link">Configure user provisioning with an identity provider</a></li><li class="pagetree__item "><a href="/provisioning-users/docs/configure-user-provisioning-with-google-cloud/" data-testid="atlas_link">Configure user provisioning with Google Cloud</a></li><li class="pagetree__item "><a href="/provisioning-users/docs/configure-user-provisioning-with-okta/" data-testid="atlas_link">Configure user provisioning with Okta</a></li><li class="pagetree__item "><a href="/provisioning-users/docs/configure-user-provisioning-for-active-directory-or-ldap/" data-testid="atlas_link">Configure user provisioning for Active Directory or LDAP</a></li></ul></li><li class="pagetree__item "><a href="/provisioning-users/docs/resolve-group-conflicts-when-syncing-users/" data-testid="atlas_link">Resolve group conflicts when syncing users</a></li><li class="pagetree__item "><a href="/provisioning-users/docs/sync-user-attributes-to-your-organization/" data-testid="atlas_link">Sync user attributes to your organization</a></li></ul></li><li class="pagetree__item "><div data-testid="pagetree-item-expander" class="pagetree__expander" role="button" tabindex="0" aria-expanded="false" aria-label="expand page tree item"><span class="Icon__IconWrapper-dyhwwi-0 bcqBjl" aria-label=""><svg width="24" height="24" viewBox="0 0 24 24" focusable="false" role="presentation"><path d="M10.294 9.698a.988.988 0 0 1 0-1.407 1.01 1.01 0 0 1 1.419 0l2.965 2.94a1.09 1.09 0 0 1 0 1.548l-2.955 2.93a1.01 1.01 0 0 1-1.42 0 .988.988 0 0 1 0-1.407l2.318-2.297-2.327-2.307z" fill="currentColor" fill-rule="evenodd"/></svg></span></div><a href="/provisioning-users/docs/provision-and-sync-users-from-g-suite/" data-testid="atlas_link">Provision and sync users from Google Workspace</a><ul class="pagetree__list false" style="display:none"><li class="pagetree__item "><a href="/provisioning-users/docs/connect-to-g-suite/" data-testid="atlas_link">Connect to Google Workspace</a></li><li class="pagetree__item "><a href="/provisioning-users/docs/set-up-g-suite/" data-testid="atlas_link">Set up Google Workspace</a></li><li class="pagetree__item "><a href="/provisioning-users/docs/manage-g-suite-user-syncing/" data-testid="atlas_link">Manage Google Workspace user syncing</a></li><li class="pagetree__item "><a href="/provisioning-users/docs/resolve-conflicts-when-syncing-groups-from-g-suite/" data-testid="atlas_link">Resolve conflicts when syncing groups from Google Workspace</a></li><li class="pagetree__item "><a href="/provisioning-users/docs/edit-g-suite-settings-and-users/" data-testid="atlas_link">Edit Google Workspace settings and users</a></li><li class="pagetree__item "><a href="/provisioning-users/docs/require-users-to-log-in-with-google/" data-testid="atlas_link">Require users to log in with Google</a></li><li class="pagetree__item "><a href="/provisioning-users/docs/g-suite-connection-troubleshooting/" data-testid="atlas_link">G Suite connection troubleshooting</a></li></ul></li><li class="pagetree__item "><div data-testid="pagetree-item-expander" class="pagetree__expander" role="button" tabindex="0" aria-expanded="false" aria-label="expand page tree item"><span class="Icon__IconWrapper-dyhwwi-0 bcqBjl" aria-label=""><svg width="24" height="24" viewBox="0 0 24 24" focusable="false" role="presentation"><path d="M10.294 9.698a.988.988 0 0 1 0-1.407 1.01 1.01 0 0 1 1.419 0l2.965 2.94a1.09 1.09 0 0 1 0 1.548l-2.955 2.93a1.01 1.01 0 0 1-1.42 0 .988.988 0 0 1 0-1.407l2.318-2.297-2.327-2.307z" fill="currentColor" fill-rule="evenodd"/></svg></span></div><a href="/provisioning-users/docs/connect-identity-providers-to-your-organization/" data-testid="atlas_link">Connect identity providers to your organization</a><ul class="pagetree__list false" style="display:none"><li class="pagetree__item "><div data-testid="pagetree-item-expander" class="pagetree__expander" role="button" tabindex="0" aria-expanded="false" aria-label="expand page tree item"><span class="Icon__IconWrapper-dyhwwi-0 bcqBjl" aria-label=""><svg width="24" height="24" viewBox="0 0 24 24" focusable="false" role="presentation"><path d="M10.294 9.698a.988.988 0 0 1 0-1.407 1.01 1.01 0 0 1 1.419 0l2.965 2.94a1.09 1.09 0 0 1 0 1.548l-2.955 2.93a1.01 1.01 0 0 1-1.42 0 .988.988 0 0 1 0-1.407l2.318-2.297-2.327-2.307z" fill="currentColor" fill-rule="evenodd"/></svg></span></div><a href="/provisioning-users/docs/add-identity-providers-to-connect-users/" data-testid="atlas_link">Add identity providers to connect users</a><ul class="pagetree__list false" style="display:none"><li class="pagetree__item "><a href="/provisioning-users/docs/what-are-identity-providers/" data-testid="atlas_link">Why connect identity providers?</a></li><li class="pagetree__item "><a href="/provisioning-users/docs/supported-identity-providers/" data-testid="atlas_link">Supported identity providers</a></li><li class="pagetree__item "><a href="/provisioning-users/docs/what-are-the-steps-to-connect-an-identity-provider/" data-testid="atlas_link">What are the steps to connect an identity provider?</a></li><li class="pagetree__item "><a href="/provisioning-users/docs/terms-associated-with-your-identity-providers/" data-testid="atlas_link">Terms associated with identity providers</a></li><li class="pagetree__item "><a href="/provisioning-users/docs/choose-your-identity-provider/" data-testid="atlas_link">Choose your identity provider</a></li><li class="pagetree__item "><a href="/provisioning-users/docs/what-are-setup-options-for-provisioning-and-single-sign-on/" data-testid="atlas_link">Connect an identity provider</a></li><li class="pagetree__item "><a href="/provisioning-users/docs/disconnect-your-identity-provider/" data-testid="atlas_link">Disconnect your identity provider</a></li></ul></li><li class="pagetree__item "><div data-testid="pagetree-item-expander" class="pagetree__expander" role="button" tabindex="0" aria-expanded="false" aria-label="expand page tree item"><span class="Icon__IconWrapper-dyhwwi-0 bcqBjl" aria-label=""><svg width="24" height="24" viewBox="0 0 24 24" focusable="false" role="presentation"><path d="M10.294 9.698a.988.988 0 0 1 0-1.407 1.01 1.01 0 0 1 1.419 0l2.965 2.94a1.09 1.09 0 0 1 0 1.548l-2.955 2.93a1.01 1.01 0 0 1-1.42 0 .988.988 0 0 1 0-1.407l2.318-2.297-2.327-2.307z" fill="currentColor" fill-rule="evenodd"/></svg></span></div><a href="/provisioning-users/docs/link-domains-to-identity-provider-directories/" data-testid="atlas_link">Link domains to identity provider directories</a><ul class="pagetree__list false" style="display:none"><li class="pagetree__item "><a href="/provisioning-users/docs/link-domains/" data-testid="atlas_link">Link domains</a></li><li class="pagetree__item "><a href="/provisioning-users/docs/link-domains-to-a-different-directory/" data-testid="atlas_link">Link domains to a different directory</a></li><li class="pagetree__item "><a href="/provisioning-users/docs/what-are-directories/" data-testid="atlas_link">What are directories?</a></li><li class="pagetree__item "><a href="/provisioning-users/docs/what-are-linked-domains/" data-testid="atlas_link">What are linked domains?</a></li></ul></li><li class="pagetree__item "><div data-testid="pagetree-item-expander" class="pagetree__expander" role="button" tabindex="0" aria-expanded="false" aria-label="expand page tree item"><span class="Icon__IconWrapper-dyhwwi-0 bcqBjl" aria-label=""><svg width="24" height="24" viewBox="0 0 24 24" focusable="false" role="presentation"><path d="M10.294 9.698a.988.988 0 0 1 0-1.407 1.01 1.01 0 0 1 1.419 0l2.965 2.94a1.09 1.09 0 0 1 0 1.548l-2.955 2.93a1.01 1.01 0 0 1-1.42 0 .988.988 0 0 1 0-1.407l2.318-2.297-2.327-2.307z" fill="currentColor" fill-rule="evenodd"/></svg></span></div><a href="/provisioning-users/docs/add-identity-providers-to-connect-portal-only-customers/" data-testid="atlas_link">Add identity providers to connect portal-only customers</a><ul class="pagetree__list false" style="display:none"><li class="pagetree__item "><a href="/provisioning-users/docs/steps-to-connect-an-identity-provider-for-customers/" data-testid="atlas_link">Steps to connect an identity provider for customers</a></li><li class="pagetree__item "><a href="/provisioning-users/docs/choose-your-identity-provider-for-portal-only-customers/" data-testid="atlas_link">Choose your identity provider for portal-only customers</a></li><li class="pagetree__item "><a href="/provisioning-users/docs/connect-an-identity-provider/" data-testid="atlas_link">Connect an identity provider for portal-only customers</a></li><li class="pagetree__item "><a href="/provisioning-users/docs/disconnect-your-identity-provider-for-portal-only-customers/" data-testid="atlas_link">Disconnect your identity provider for portal-only customers</a></li></ul></li></ul></li><li class="pagetree__item "><div data-testid="pagetree-item-expander" class="pagetree__expander" role="button" tabindex="0" aria-expanded="false" aria-label="expand page tree item"><span class="Icon__IconWrapper-dyhwwi-0 bcqBjl" aria-label=""><svg width="24" height="24" viewBox="0 0 24 24" focusable="false" role="presentation"><path d="M10.294 9.698a.988.988 0 0 1 0-1.407 1.01 1.01 0 0 1 1.419 0l2.965 2.94a1.09 1.09 0 0 1 0 1.548l-2.955 2.93a1.01 1.01 0 0 1-1.42 0 .988.988 0 0 1 0-1.407l2.318-2.297-2.327-2.307z" fill="currentColor" fill-rule="evenodd"/></svg></span></div><a href="/provisioning-users/docs/provision-and-sync-users-from-microsoft-azure-ad/" data-testid="atlas_link"> Provision and sync users from Microsoft Azure AD</a><ul class="pagetree__list false" style="display:none"><li class="pagetree__item "><a href="/provisioning-users/docs/choose-the-right-microsoft-azure-ad-option-for-you/" data-testid="atlas_link">Choose the right Microsoft Azure AD option for you</a></li><li class="pagetree__item "><div data-testid="pagetree-item-expander" class="pagetree__expander" role="button" tabindex="0" aria-expanded="false" aria-label="expand page tree item"><span class="Icon__IconWrapper-dyhwwi-0 bcqBjl" aria-label=""><svg width="24" height="24" viewBox="0 0 24 24" focusable="false" role="presentation"><path d="M10.294 9.698a.988.988 0 0 1 0-1.407 1.01 1.01 0 0 1 1.419 0l2.965 2.94a1.09 1.09 0 0 1 0 1.548l-2.955 2.93a1.01 1.01 0 0 1-1.42 0 .988.988 0 0 1 0-1.407l2.318-2.297-2.327-2.307z" fill="currentColor" fill-rule="evenodd"/></svg></span></div><a href="/provisioning-users/docs/connect-and-sync-azure-ad-for-nested-groups/" data-testid="atlas_link">Connect and sync Azure AD for nested groups</a><ul class="pagetree__list false" style="display:none"><li class="pagetree__item "><a href="/provisioning-users/docs/connect-to-azure-active-directory/" data-testid="atlas_link">Connect to Azure Active Directory</a></li><li class="pagetree__item "><a href="/provisioning-users/docs/set-up-sync-settings/" data-testid="atlas_link">Set up sync settings</a></li><li class="pagetree__item "><a href="/provisioning-users/docs/manage-sync-settings/" data-testid="atlas_link">Manage sync settings</a></li><li class="pagetree__item "><a href="/provisioning-users/docs/require-single-sign-on-for-user-login/" data-testid="atlas_link">Require single sign-on for user login</a></li><li class="pagetree__item "><a href="/provisioning-users/docs/disconnect-azure-active-directory/" data-testid="atlas_link">Disconnect Azure Active Directory</a></li></ul></li><li class="pagetree__item "><a href="/provisioning-users/docs/switch-from-azure-ad-for-nested-groups-to-scim/" data-testid="atlas_link">Switch from Azure AD for nested groups to SCIM</a><ul class="pagetree__list false" style="display:none"></ul></li><li class="pagetree__item "><a href="/provisioning-users/docs/switch-from-scim-to-azure-ad-for-nested-groups/" data-testid="atlas_link">Switch from SCIM to Azure AD for nested groups</a></li><li class="pagetree__item "><div data-testid="pagetree-item-expander" class="pagetree__expander" role="button" tabindex="0" aria-expanded="false" aria-label="expand page tree item"><span class="Icon__IconWrapper-dyhwwi-0 bcqBjl" aria-label=""><svg width="24" height="24" viewBox="0 0 24 24" focusable="false" role="presentation"><path d="M10.294 9.698a.988.988 0 0 1 0-1.407 1.01 1.01 0 0 1 1.419 0l2.965 2.94a1.09 1.09 0 0 1 0 1.548l-2.955 2.93a1.01 1.01 0 0 1-1.42 0 .988.988 0 0 1 0-1.407l2.318-2.297-2.327-2.307z" fill="currentColor" fill-rule="evenodd"/></svg></span></div><a href="/provisioning-users/docs/understand-azure-ad-syncing-for-nested-groups/" data-testid="atlas_link">Understand Azure AD syncing for nested groups</a><ul class="pagetree__list false" style="display:none"><li class="pagetree__item "><a href="/provisioning-users/docs/how-does-azure-ad-for-nested-groups-work/" data-testid="atlas_link">How does Azure AD for nested groups work?</a></li><li class="pagetree__item "><a href="/provisioning-users/docs/what-are-nested-groups/" data-testid="atlas_link">What are nested groups?</a></li><li class="pagetree__item "><a href="/provisioning-users/docs/limitations-of-azure-ad-for-nested-groups/" data-testid="atlas_link">Limitations of Azure AD for nested groups</a></li></ul></li></ul></li></ul></div></div></aside><main class="topic__container"><div class="topic__sub-header" data-testid="topic_sub_header"><div class="breadcrumbs-wrapper" data-testid="breadcrumbs"><div class="BreadcrumbsContainer-tgj96-0 eiYreW"><div class="BreadcrumbsItem__BreadcrumbsItemElement-sc-1hh8yo5-0 fItpNE"><a class="Button__ButtonElement-sc-114ur46-0 eMRgDW sc-bbmXgH gZerWW" spacing="none" href="/" target=""><span style="align-self:center;display:inline-flex;flex-wrap:nowrap;max-width:100%;position:relative"><span style="align-items:center;align-self:center;flex:1 1 auto;margin:0;max-width:100%;overflow:hidden;text-overflow:ellipsis;white-space:nowrap;transition:opacity 0.3s;opacity:1">Atlassian Support</span></span></a><div class="Separator-c8t0qf-0 kSIZGq">/</div></div><div class="BreadcrumbsItem__BreadcrumbsItemElement-sc-1hh8yo5-0 fItpNE"><a class="Button__ButtonElement-sc-114ur46-0 eMRgDW sc-bbmXgH gZerWW" spacing="none" href="/provisioning-users/resources/" target=""><span style="align-self:center;display:inline-flex;flex-wrap:nowrap;max-width:100%;position:relative"><span style="align-items:center;align-self:center;flex:1 1 auto;margin:0;max-width:100%;overflow:hidden;text-overflow:ellipsis;white-space:nowrap;transition:opacity 0.3s;opacity:1">Provisioning users Resources</span></span></a><div class="Separator-c8t0qf-0 kSIZGq">/</div></div><div class="BreadcrumbsItem__BreadcrumbsItemElement-sc-1hh8yo5-0 fItpNE"><a class="Button__ButtonElement-sc-114ur46-0 eMRgDW sc-bbmXgH gZerWW" spacing="none" href="/provisioning-users/docs/provision-and-sync-users-from-an-identity-provider/" target=""><span style="align-self:center;display:inline-flex;flex-wrap:nowrap;max-width:100%;position:relative"><span style="align-items:center;align-self:center;flex:1 1 auto;margin:0;max-width:100%;overflow:hidden;text-overflow:ellipsis;white-space:nowrap;transition:opacity 0.3s;opacity:1">Provision and sync users from an identity provider</span></span></a></div></div></div></div><article class="topic__inner-container margin-top-medium" id="maincontent"><div class="title margin-bottom-medium"><h1>Understand user provisioning</h1></div><div class="topic__body"><div><div class='adf__content'><div style='position:absolute;left:-9999px;width:1px;height:1px;overflow:hidden'></div><div style='position:absolute;height:0;width:100%'><object data='about:blank' type='text/html' style='position:absolute;height:0;width:100%' aria-hidden='true' tabindex='-1'></object></div><div class='ak-renderer-wrapper sc-dymIpo gEdAYa'><div></div><div class='sc-kXeGPI fIPKnQ'><div class='ak-renderer-document'><p data-renderer-start-pos='0'>We support user provisioning using the System for Cross-domain Identity Management (SCIM), and this feature uses the SCIM 2.0 version of the protocol.</p><p data-renderer-start-pos='152'>User provisioning integrates an external user directory with your Atlassian organization. This integration allows you to automatically update the users and groups in your Atlassian organization when you make updates in your identity provider. For example, with user provisioning, you can create, link, and deactivate managed Atlassian user accounts from your identity provider.</p><div class='pm-table-container ' data-layout='default' style='width:inherit'><div class='pm-table-wrapper'><table data-number-column='false'><tbody><tr><td rowspan='1' colSpan='1'><p data-renderer-start-pos='531'><span><span class='text-fragment' data-testid='inline-text-fragment'><span><span><span><span role='presentation'><span class='icon-extension' data-testid='icon' style='white-space:normal'><span class='Icon__IconWrapper-dyhwwi-0 dqqHMN'><svg width='24' height='24' viewBox='0 0 24 24' focusable='false' role='presentation'><g fill='currentColor' fill-rule='evenodd'><path d='M6 14c0-1.105.902-2 2.009-2h7.982c1.11 0 2.009.894 2.009 2.006v4.44c0 3.405-12 3.405-12 0V14z'></path><circle cx='12' cy='7' r='4'></circle></g></svg></span></span></span></span></span><strong>Who can do this?</strong></span></span></span><br><strong>Role:</strong> <span><span class='text-fragment' data-testid='inline-text-fragment'><span>Organization admin</span></span></span><br><strong>Plan:</strong> <span><span class='text-fragment' data-testid='inline-text-fragment'><span><span><a href='https://support.atlassian.com/security-and-access-policies/docs/understand-atlassian-guard/' data-testid='sac-link-extension' target='_blank' rel='noopener noreferrer'>Atlassian Guard Standard</a></span></span></span></span></p></td></tr></tbody></table></div></div><h2 id='Supported-identity-providers'>Supported identity providers</h2><p data-renderer-start-pos='586'>You can use the identity provider of your choice, but some capabilities are only available with selected identity providers. <span><a href='https://support.atlassian.com/provisioning-users/docs/supported-identity-providers/' data-testid='sac-link-extension' target='_blank' rel='noopener noreferrer'>Learn which identity providers we support</a></span> </p><p data-renderer-start-pos='716'>The steps involved to set up user provisioning will differ depending on the identity provider you use. Here are setup instructions for some of the commonly used identity providers:</p><ul class='ak-ul'><li><p data-renderer-start-pos='898'>Okta: <span><a href='https://support.atlassian.com/provisioning-users/docs/configure-user-provisioning-with-okta/' data-testid='sac-link-extension' target='_blank' rel='noopener noreferrer'>Learn how to configure user provisioning with Okta</a></span> </p></li><li><p data-renderer-start-pos='910'>OneLogin: <a class='sc-eIHaNI fVLHZh' href='https://onelogin.service-now.com/support?id=kb_article&sys_id=05501489db792708ca1c400e0b9619ea' title='https://onelogin.service-now.com/support?id=kb_article&sys_id=05501489db792708ca1c400e0b9619ea'>Learn how to configure user provisioning for OneLogin</a></p></li><li><p data-renderer-start-pos='977'>Azure AD: <a class='sc-eIHaNI fVLHZh' href='https://docs.microsoft.com/en-us/azure/active-directory/saas-apps/atlassian-cloud-provisioning-tutorial' title='https://docs.microsoft.com/en-us/azure/active-directory/saas-apps/atlassian-cloud-provisioning-tutorial'>Learn how to configure user provisioning for Azure AD</a></p></li><li><p data-renderer-start-pos='1044'>Google Cloud:<span><a href='https://support.atlassian.com/provisioning-users/docs/configure-user-provisioning-with-google-cloud/' data-testid='sac-link-extension' target='_blank' rel='noopener noreferrer'>Configure user provisioning with Google Cloud</a></span> </p></li><li><p data-renderer-start-pos='1063'>Google Workspace: <a class='sc-eIHaNI fVLHZh' href='https://support.atlassian.com/provisioning-users/docs/connect-to-g-suite/' title='https://support.atlassian.com/provisioning-users/docs/connect-to-g-suite/'>Learn how to set up user provisioning for Google Workspace </a></p></li><li><p data-renderer-start-pos='1144'>PingFederate: <a class='sc-eIHaNI fVLHZh' href='https://docs.pingidentity.com/r/en-us/pingfederate-atlassian-cloud-connector' title='https://docs.pingidentity.com/r/en-us/pingfederate-atlassian-cloud-connector'>Learn how to configure user provisioning for PingFederate</a></p></li><li><p data-renderer-start-pos='1219'>JumpCloud: <a class='sc-eIHaNI fVLHZh' href='https://support.jumpcloud.com/support/s/article/Identity-Management-with-Atlassian-Cloud' title='https://support.jumpcloud.com/support/s/article/Identity-Management-with-Atlassian-Cloud'>Learn how to configure user provisioning for JumpCloud</a></p></li></ul><p data-renderer-start-pos='1290'>If you want to use an identity provider that isn’t supported, you can use the <a class='sc-eIHaNI fVLHZh' href='https://developer.atlassian.com/cloud/admin/user-provisioning/rest' title='https://developer.atlassian.com/cloud/admin/user-provisioning/rest'>user provisioning API</a> to create your own integration that allows you to manage users and groups.</p><p data-renderer-start-pos='1466'>Before you configure user provisioning, you’ll need to add your identity provider to your Atlassian organization. <span><a href='https://support.atlassian.com/provisioning-users/docs/choose-your-identity-provider/' data-testid='sac-link-extension' target='_blank' rel='noopener noreferrer'>Learn how to add an identity provider </a></span> </p><h2 id='Available-attributes-for-mapping'>Available attributes for mapping</h2><p data-renderer-start-pos='1619'>This is the attribute mapping between an identity provider and your Atlassian organization.</p><div class='pm-table-container ' data-layout='default' style='width:inherit'><div class='pm-table-wrapper'><table data-number-column='false'><tbody><tr><th rowspan='1' colSpan='1' style='background-color:var(--ds-background-neutral, #F4F5F7)'><p data-renderer-start-pos='1712'><strong>SCIM attribute</strong></p></th><th rowspan='1' colSpan='1' style='background-color:var(--ds-background-neutral, #F4F5F7)'><p data-renderer-start-pos='1730'><strong>AtlassianCloud attribute</strong></p></th></tr><tr><td rowspan='1' colSpan='1'><p data-renderer-start-pos='1760'>nickName</p></td><td rowspan='1' colSpan='1'><p data-renderer-start-pos='1772'>Publicname</p></td></tr></tbody></table></div></div><p data-renderer-start-pos='1790'>The way you map attributes changes depending on your identity provider. Check out the step-by-step instructions for Okta, OneLogin, and Microsoft Azure AD.<br><a class='sc-eIHaNI fVLHZh' href='https://support.atlassian.com/provisioning-users/docs/sync-user-attributes-to-your-organization/' title='https://support.atlassian.com/provisioning-users/docs/sync-user-attributes-to-your-organization/'>Learn how to map attributes</a></p><h2 id='Supported-products'>Supported products</h2><p data-renderer-start-pos='1995'>Provisioning is available for all Atlassian accounts, which means that you can create, update, and deactivate accounts from your identity provider. Syncing groups is only currently available for Jira product instances, Confluence, Trello and not yet available for Bitbucket.</p><p data-renderer-start-pos='2271'>When a Trello Enterprise is linked to an Atlassian organization, any users who were already provisioned to the organization via SCIM, as well as any users provisioned this way going forward, will have a free Trello account provisioned. The account will be managed by the Trello Enterprise but will not have an Enterprise license unless granted one by an admin.</p><h2 id='How-user-provisioning-works'>How user provisioning works</h2><p data-renderer-start-pos='2662'>After you connect your identity provider to your organization, your users and groups sync to your organization and sites, making them available for granting product access. This diagram illustrates how users and groups sync once you set up user provisioning.</p><div class='ak-renderer-extension ' style='width:100%' data-layout='default'><div class='ak-renderer-extension-overflow-container'><div style='text-align:center'><img style='max-width:100%;border:2px inset rgba(9,30,66,0.08);-webkit-border-radius:3px;-moz-border-radius:3px;border-radius:3px' src='//images.ctfassets.net/zsv3d0ugroxu/fz3yfJt59O10E0j2Yd442/2903b536866e350bf6a0c490956e05df/diagram_UserProvisioningOverview' alt='Diagram of identity provider connecting to your organization - your users and groups sync to your organization and sites'></div></div></div><p data-renderer-start-pos='2923'>The next few sections break down how the synchronization works:</p><ul class='ak-ul'><li><p data-renderer-start-pos='2988'>Allowed number of groups and users</p></li><li><p data-renderer-start-pos='3026'>Users and groups sync from your identity provider to your organization</p></li><li><p data-renderer-start-pos='3100'>Your organization’s directory syncs to all associated sites</p></li><li><p data-renderer-start-pos='3163'>Groups get assigned to products</p></li></ul><p data-renderer-start-pos='3200'><a class='sc-eIHaNI fVLHZh' href='https://youtu.be/7EQhYz-vApw' title='https://youtu.be/7EQhYz-vApw'>Learn more about user provisioning in this video</a></p><h3 id='Allowed-number-of-groups-and-users'>Allowed number of groups and users</h3><p data-renderer-start-pos='3286'>A large number of groups and users can take a while to sync to an Atlassian organization. These are the limits for how many groups you can sync.</p><p data-renderer-start-pos='3432'>You can only sync up to:</p><ul class='ak-ul'><li><p data-renderer-start-pos='3458'>300,000 users per organization</p></li><li><p data-renderer-start-pos='3492'>150,000 users per group. </p></li><li><p data-renderer-start-pos='3522'>200,000 groups per identity provider directory. To add more groups,<a class='sc-eIHaNI fVLHZh' href='https://support.atlassian.com/contact/#/' title='https://support.atlassian.com/contact/#/'> contact customer support</a>.</p></li></ul><h3 id='Users-and-groups-sync-from-your-identity-provider-to-your-organization'>Users and groups sync from your identity provider to your organization</h3><p data-renderer-start-pos='3693'>When you set up user provisioning, you create a directory for your users. All users and groups in your identity provider from your verified domain(s) or from outside your verified domain(s) sync to your organization's directory, as shown in the diagram.</p><p data-renderer-start-pos='3948'>You create the groups to provision to your identity provider directory. For some organizations, you continue to see a group we create called <strong>All members for directory - <</strong><em><strong>directory_id</strong></em><strong>></strong>, and add all users to.</p><p data-renderer-start-pos='4156'>If you use Google Workspace, you will see a group we created called All users for Google Workspace.</p><div class='ak-renderer-extension ' style='width:100%' data-layout='default'><div class='ak-renderer-extension-overflow-container'><div style='text-align:center'><img style='max-width:100%;border:2px inset rgba(9,30,66,0.08);-webkit-border-radius:3px;-moz-border-radius:3px;border-radius:3px' src='//images.ctfassets.net/zsv3d0ugroxu/2uV6bXipBgeWxXaSTRewAq/1f9820608825ce406fde77e6b530b875/diagram_UserProvisioning1' alt='Diagram of identity provider for different groups syncing with your organization'></div></div></div><p data-renderer-start-pos='4258'>After you connect your identity provider to your Atlassian organization, synced directory groups appear in your Atlassian organization and you're unable to make changes to a user's account from the organization.</p><p data-renderer-start-pos='4471'>If your Atlassian organization already has existing users from a <strong>verified domain</strong>:</p><ul class='ak-ul'><li><p data-renderer-start-pos='4554'><em>And the identity provider has a user with the same email address as a user in your organization</em>, we create a link between both user accounts. You can only make changes to the user's account from your identity provider.<br><br></p></li><li><p data-renderer-start-pos='4777'><em>And the identity provider doesn't have a user with the same email address as a user in your organization</em>, the user's access remains the same and you can still manage that user from your Atlassian organization.</p></li></ul><p data-renderer-start-pos='4992'>If your Atlassian organization already has existing users from an <strong>unverified domain</strong>:</p><ul class='ak-ul'><li><p data-renderer-start-pos='5078'><em>And the identity provider has a user with the same email address in your organization</em>, we create a link between both user accounts. You can only make changes to the user’s account from your identity provider.</p><p data-renderer-start-pos='5288'><br>You may want to avoid syncing an existing user from an unverified domain. The user may get access to content in your organization or product access, based on how you set up groups to sync from your identity provider. <br><br>We recommend you verify the domain for these users to control access to your organization’s content and access to Atlassian products. <a class='sc-eIHaNI fVLHZh' href='https://support.atlassian.com/user-management/docs/verify-a-domain-to-manage-accounts/' title='https://support.atlassian.com/user-management/docs/verify-a-domain-to-manage-accounts/'>How to verify a domain</a></p></li></ul><div style='background:#DEEBFF' class='ak-editor-panel' data-panel-type='info'><span style='color:#0052CC' class='ak-editor-panel__icon'><span class='sc-bnXvFD jjYaPd' role='img' aria-label='Panel info'><svg width='24' height='24' viewBox='0 0 24 24' focusable='false' role='presentation'><path d='M12 20a8 8 0 1 1 0-16 8 8 0 0 1 0 16zm0-8.5a1 1 0 0 0-1 1V15a1 1 0 0 0 2 0v-2.5a1 1 0 0 0-1-1zm0-1.125a1.375 1.375 0 1 0 0-2.75 1.375 1.375 0 0 0 0 2.75z' fill='currentColor' fill-rule='evenodd'></path></svg></span></span><div class='ak-editor-panel__content'><p data-renderer-start-pos='5670'>Syncing more than 500 groups will take a significant amount of time. Be prepared to wait a while for the sync to complete. </p></div></div><h3 id='Your-organization’s-directory-syncs-to-all-associated-sites'>Your organization’s directory syncs to all associated sites</h3><p data-renderer-start-pos='5858'>Any sites you've added to your organization now have access to your provisioned users and groups, as shown in the diagram. Synced directory groups will appear along the default and native groups in your sites.</p><div class='ak-renderer-extension ' style='width:100%' data-layout='default'><div class='ak-renderer-extension-overflow-container'><div style='text-align:center'><img style='max-width:100%;border:2px inset rgba(9,30,66,0.08);-webkit-border-radius:3px;-moz-border-radius:3px;border-radius:3px' src='//images.ctfassets.net/zsv3d0ugroxu/5Y3X15svPAwe6GmAvvUaFX/2172155ffed774492407cfe822f3a172/diagram_UserProvisioning2' alt='Diagram of your organization’s directory syncing to all associated sites'></div></div></div><h3 id='Groups-get-assigned-to-products'>Groups get assigned to products</h3><p data-renderer-start-pos='6103'>You can start granting users product access by assigning groups to your site's products.</p><div class='ak-renderer-extension ' style='width:100%' data-layout='default'><div class='ak-renderer-extension-overflow-container'><div style='text-align:center'><img style='max-width:100%;border:2px inset rgba(9,30,66,0.08);-webkit-border-radius:3px;-moz-border-radius:3px;border-radius:3px' src='//images.ctfassets.net/zsv3d0ugroxu/5JGEd8XRTU7GzkTuyVasSy/ed438723a1cc86d2c18b5c76acf5e965/diagram_UserProvisioning3.png' alt='Diagram of cloud sites getting assigned to Jira Software an to Confluence '></div></div></div><p data-renderer-start-pos='6194'>When users have product access, Jira and Confluence admins can update product permissions for those users from the Jira and Confluence settings. See <span><a href='https://support.atlassian.com/jira-cloud-administration/docs/manage-global-permissions/' data-testid='sac-link-extension' target='_blank' rel='noopener noreferrer'>Manage global permissions</a></span> for administering Jira permissions and <span><a href='https://support.atlassian.com/confluence-cloud/docs/manage-site-level-permissions/' data-testid='sac-link-extension' target='_blank' rel='noopener noreferrer'>Manage global permissions in Confluence administration</a></span> for administering Confluence permissions.</p><h2 id='User-provisioning-features'>User provisioning features</h2><p data-renderer-start-pos='6457'>Once you connect your identity provider to your Atlassian organization, you manage all user attributes and group memberships from your identity provider. If you want to manage users from your Atlassian organization, disable the connection with your identity provider.</p><div style='background:#DEEBFF' class='ak-editor-panel' data-panel-type='info'><span style='color:#0052CC' class='ak-editor-panel__icon'><span class='sc-bnXvFD jjYaPd' role='img' aria-label='Panel info'><svg width='24' height='24' viewBox='0 0 24 24' focusable='false' role='presentation'><path d='M12 20a8 8 0 1 1 0-16 8 8 0 0 1 0 16zm0-8.5a1 1 0 0 0-1 1V15a1 1 0 0 0 2 0v-2.5a1 1 0 0 0-1-1zm0-1.125a1.375 1.375 0 1 0 0-2.75 1.375 1.375 0 0 0 0 2.75z' fill='currentColor' fill-rule='evenodd'></path></svg></span></span><div class='ak-editor-panel__content'><h3 id='Manage-group-names'>Manage group names</h3><ul class='ak-ul'><li><p data-renderer-start-pos='6746'><em>Rename groups after they've synced to your Atlassian organization</em>. You’ll need to create a new group with the desired name, update its membership, and delete the old group.</p></li></ul><h3 id='Resolve-group-conflicts'>Resolve group conflicts</h3><ul class='ak-ul'><li><p data-renderer-start-pos='6949'><em>Review group names before they’ve synced to your Atlassian organization. </em>You’ll need to rename groups with the same name in your identity provider and Atlassian organization. <span><a href='https://support.atlassian.com/provisioning-users/docs/resolve-group-conflicts-when-syncing-users/' data-testid='sac-link-extension' target='_blank' rel='noopener noreferrer'>Learn how to resolve group conflicts when syncing users</a></span> </p></li></ul></div></div><h3 id='Supported-user-account-operations'>Supported user account operations</h3><p data-renderer-start-pos='7169'>When you perform these user management operations from your identity provider, your updates will sync with your Atlassian organization.</p><p data-renderer-start-pos='7306'>We sync user accounts from your identity provider to your Atlassian organization when they have email addresses from your verified domain(s) and from outside your verified domain(s). </p><div class='pm-table-container ' data-layout='default' style='width:inherit'><div class='pm-table-wrapper'><table data-number-column='false'><colgroup><col style='width:102px'><col style='width:405px'></colgroup><tbody><tr><th rowspan='1' colSpan='1' data-colwidth='121'><p data-renderer-start-pos='7491'><strong>Operations</strong></p></th><th rowspan='1' colSpan='1' data-colwidth='477'><p data-renderer-start-pos='7505'><strong>Notes</strong></p></th></tr><tr><td rowspan='1' colSpan='1' data-colwidth='121'><p data-renderer-start-pos='7516'>Create a new user account</p></td><td rowspan='1' colSpan='1' data-colwidth='477'><p data-renderer-start-pos='7545'>A user account gets created when it has an email address from your verified domain(s) or from outside your verified domain(s).</p></td></tr><tr><td rowspan='1' colSpan='1' data-colwidth='121'><p data-renderer-start-pos='7677'>Link an existing user account</p></td><td rowspan='1' colSpan='1' data-colwidth='477'><p data-renderer-start-pos='7710'>If an Atlassian account already exists on the Atlassian platform, we'll automatically link the user in your identity provider to the user in your Atlassian organization.</p></td></tr><tr><td rowspan='1' colSpan='1' data-colwidth='121'><p data-renderer-start-pos='7885'>Update a user's account details</p></td><td rowspan='1' colSpan='1' data-colwidth='477'><p data-renderer-start-pos='7920'>You can update these user attributes from your identity provider:</p><ul class='ak-ul'><li><p data-renderer-start-pos='7987'>Display name: This is a combination of a user’s first and last name. If you update the display name it also overwrites the attributes for first and last name.</p></li><li><p data-renderer-start-pos='8149'>Email address</p></li><li><p data-renderer-start-pos='8166'>Organization</p></li><li><p data-renderer-start-pos='8182'>Job title</p></li><li><p data-renderer-start-pos='8195'>Timezone</p></li><li><p data-renderer-start-pos='8207'>Department</p></li><li><p data-renderer-start-pos='8221'>Preferred language</p></li></ul><div style='background:#FFFAE6' class='ak-editor-panel' data-panel-type='warning'><span style='color:#FF991F' class='ak-editor-panel__icon'><span class='sc-bnXvFD jjYaPd' role='img' aria-label='Panel warning'><svg width='24' height='24' viewBox='0 0 24 24' focusable='false' role='presentation'><g fill-rule='evenodd'><path d='M12.938 4.967c-.518-.978-1.36-.974-1.876 0L3.938 18.425c-.518.978-.045 1.771 1.057 1.771h14.01c1.102 0 1.573-.797 1.057-1.771L12.938 4.967z' fill='currentColor'></path><path d='M12 15a1 1 0 0 1-1-1V9a1 1 0 0 1 2 0v5a1 1 0 0 1-1 1m0 3a1 1 0 0 1 0-2 1 1 0 0 1 0 2' fill='inherit'></path></g></svg></span></span><div class='ak-editor-panel__content'><p data-renderer-start-pos='8245'>When you update an email address from a verified or unverified domain to an unverified domain it:</p><ul class='ak-ul'><li><p data-renderer-start-pos='8344'>Removes the user from groups provisioned by SCIM</p></li><li><p data-renderer-start-pos='8396'>May cause the user to lose product access granted in the SCIM group</p></li></ul><p data-renderer-start-pos='8469'>To make sure users aren’t removed from product access groups, <span><a href='https://support.atlassian.com/user-management/docs/verify-a-domain-to-manage-accounts/' data-testid='sac-link-extension' target='_blank' rel='noopener noreferrer'>verify a domain</a></span> in your Atlassian organization first.</p></div></div><div style='background:#DEEBFF' class='ak-editor-panel' data-panel-type='info'><span style='color:#0052CC' class='ak-editor-panel__icon'><span class='sc-bnXvFD jjYaPd' role='img' aria-label='Panel info'><svg width='24' height='24' viewBox='0 0 24 24' focusable='false' role='presentation'><path d='M12 20a8 8 0 1 1 0-16 8 8 0 0 1 0 16zm0-8.5a1 1 0 0 0-1 1V15a1 1 0 0 0 2 0v-2.5a1 1 0 0 0-1-1zm0-1.125a1.375 1.375 0 1 0 0-2.75 1.375 1.375 0 0 0 0 2.75z' fill='currentColor' fill-rule='evenodd'></path></svg></span></span><div class='ak-editor-panel__content'><p data-renderer-start-pos='8574'>About attributes for users outside of your verified domain</p><p data-renderer-start-pos='8634'>Users from outside your verified domain aren't managed accounts. When you update attributes in your identity provider for these users, we won't sync the updates.</p></div></div></td></tr><tr><td rowspan='1' colSpan='1' data-colwidth='121'><p data-renderer-start-pos='8803'>Activate a user account</p></td><td rowspan='1' colSpan='1' data-colwidth='477'><p data-renderer-start-pos='8830'>You can activate a user's Atlassian account from your identity provider.</p></td></tr><tr><td rowspan='1' colSpan='1' data-colwidth='121'><p data-renderer-start-pos='8908'>Deactivate a user account</p></td><td rowspan='1' colSpan='1' data-colwidth='477'><p data-renderer-start-pos='8937'>You can deactivate the Atlassian account for users from your verified domain in the identity provider.</p><p data-renderer-start-pos='9041'>When you deactivate users <strong>outside</strong> your verified domain:</p><ul class='ak-ul'><li><p data-renderer-start-pos='9098'>User is removed from group provisioned by SCIM</p></li><li><p data-renderer-start-pos='9148'>User could lose product access granted in the SCIM group</p></li><li><p data-renderer-start-pos='9208'>User has Atlassian site access</p></li></ul><p data-renderer-start-pos='9244'>To remove site access after deactivation, you can remove the user from the site.</p></td></tr><tr><td rowspan='1' colSpan='1' data-colwidth='121'><p data-renderer-start-pos='9330'>Delete a user account</p></td><td rowspan='1' colSpan='1' data-colwidth='477'><p data-renderer-start-pos='9355'>We recommend you deactivate a user's account in your identity provider before you delete a user account.</p><p data-renderer-start-pos='9461'>To delete a user's Atlassian account from your verified domain, delete the user from the Atlassian directory in your organization.<br><br></p><div style='background:#DEEBFF' class='ak-editor-panel' data-panel-type='info'><span style='color:#0052CC' class='ak-editor-panel__icon'><span class='sc-bnXvFD jjYaPd' role='img' aria-label='Panel info'><svg width='24' height='24' viewBox='0 0 24 24' focusable='false' role='presentation'><path d='M12 20a8 8 0 1 1 0-16 8 8 0 0 1 0 16zm0-8.5a1 1 0 0 0-1 1V15a1 1 0 0 0 2 0v-2.5a1 1 0 0 0-1-1zm0-1.125a1.375 1.375 0 1 0 0-2.75 1.375 1.375 0 0 0 0 2.75z' fill='currentColor' fill-rule='evenodd'></path></svg></span></span><div class='ak-editor-panel__content'><p data-renderer-start-pos='9594'>Unable to delete user account for users outside your verified domain</p><p data-renderer-start-pos='9664'>When you delete a user from your identity provider, we deactivate the user account. To learn what happens when we deactivate, view the “deactivate a user account” section.</p></div></div></td></tr></tbody></table></div></div><h3 id='Supported-group-operations'>Supported group operations</h3><p data-renderer-start-pos='9873'>Use groups to manage admin permissions and product access (new licenses) from your identity provider and these updates will sync with your Atlassian organization.</p><p data-renderer-start-pos='10037'>Any group that is marked as a default group can't be managed via SCIM integration. You can only manage groups synced from your identity provider directory via SCIM.</p><div class='pm-table-container ' data-layout='default' style='width:inherit'><div class='pm-table-wrapper'><table data-number-column='false'><colgroup><col style='width:104px'><col style='width:403px'></colgroup><tbody><tr><th rowspan='1' colSpan='1' data-colwidth='123'><p data-renderer-start-pos='10203'><strong>Operations</strong></p></th><th rowspan='1' colSpan='1' data-colwidth='475'><p data-renderer-start-pos='10217'><strong>Notes</strong></p></th></tr><tr><td rowspan='1' colSpan='1' data-colwidth='123'><p data-renderer-start-pos='10228'>Create a group</p></td><td rowspan='1' colSpan='1' data-colwidth='475'><p data-renderer-start-pos='10246'>The group gets created as a read-only group in the organization's directory. You can only edit groups from your identity provider. Give the new group a name that doesn't already exist your organization.</p></td></tr><tr><td rowspan='1' colSpan='1' data-colwidth='123'><p data-renderer-start-pos='10454'>Delete a group</p></td><td rowspan='1' colSpan='1' data-colwidth='475'><p data-renderer-start-pos='10472'>Delete a group from your identity provider to remove the group from your organization's directory.</p></td></tr><tr><td rowspan='1' colSpan='1' data-colwidth='123'><p data-renderer-start-pos='10576'>Push an existing group</p></td><td rowspan='1' colSpan='1' data-colwidth='475'><p data-renderer-start-pos='10602'>If you try to push a group from your identity provider that has the same name as a group in your organization, you'll get an error.</p></td></tr><tr><td rowspan='1' colSpan='1' data-colwidth='123'><p data-renderer-start-pos='10739'>Update group membership</p></td><td rowspan='1' colSpan='1' data-colwidth='475'><p data-renderer-start-pos='10766'>You can update groups from your identity provider to configure product access, admin privileges, or application-specific settings, such as Confluence space permissions.</p></td></tr></tbody></table></div></div><h3 id='Troubleshooting'>Troubleshooting</h3><p data-renderer-start-pos='10959'>When troubleshooting issues with syncing users and groups, check the <strong>Troubleshooting log</strong> on the <strong>User provisioning </strong>page of your Atlassian organization.</p><div class='pm-table-container ' data-layout='default' style='width:inherit'><div class='pm-table-wrapper'><table data-number-column='false'><colgroup><col style='width:153px'><col style='width:286px'><col style='width:68px'></colgroup><tbody><tr><th rowspan='1' colSpan='1' data-colwidth='180'><p data-renderer-start-pos='11111'><strong>Problem</strong></p></th><th rowspan='1' colSpan='1' data-colwidth='337'><p data-renderer-start-pos='11122'><strong>Workaround / troubleshooting tips</strong></p></th><th rowspan='1' colSpan='1' data-colwidth='80'><p data-renderer-start-pos='11159'><strong>Recorded in log</strong></p></th></tr><tr><td rowspan='1' colSpan='1' data-colwidth='180'><p data-renderer-start-pos='11180'>A group has successfully synced, but the group is empty and doesn't include any synced users.</p></td><td rowspan='1' colSpan='1' data-colwidth='337'><p data-renderer-start-pos='11277'>When pushing a group, make sure that the synchronized group does not have the same name as a default group (e.g. <em>org-admins</em> or <em>site-admins</em>) or a manually created group.</p></td><td rowspan='1' colSpan='1' data-colwidth='80'><p data-renderer-start-pos='11449'>Yes</p></td></tr><tr><td rowspan='1' colSpan='1' data-colwidth='180'><p data-renderer-start-pos='11458'>A group synced successfully, but you don't see it in the site admin area and can't find it on the <strong>Product access</strong> page.</p></td><td rowspan='1' colSpan='1' data-colwidth='337'><p data-renderer-start-pos='11580'>Make sure you added the site to your organization. To add the site, use the <strong>Add a site </strong>option from your Atlassian organization.</p></td><td rowspan='1' colSpan='1' data-colwidth='80'><p data-renderer-start-pos='11711'>No</p></td></tr><tr><td rowspan='1' colSpan='1' data-colwidth='180'><p data-renderer-start-pos='11719'>A user seems to be successfully synced, but the user account doesn't appear on the <strong>Managed accounts</strong> page.</p></td><td rowspan='1' colSpan='1' data-colwidth='337'><p data-renderer-start-pos='11828'>Check that the user's email address is part of your verified domain. <br><br>If the user's account doesn't have an email address with your verified domain, you can navigate to <strong>Products</strong> > <strong>Users</strong> page to find the user account.</p></td><td rowspan='1' colSpan='1' data-colwidth='80'><p data-renderer-start-pos='12049'>Yes</p></td></tr><tr><td rowspan='1' colSpan='1' data-colwidth='180'><p data-renderer-start-pos='12058'>(If Okta is your identity provider) Users don't sync to the organization directory when they were already assigned to the Atlassian app before the user provisioning integration is complete.</p></td><td rowspan='1' colSpan='1' data-colwidth='337'><p data-renderer-start-pos='12251'>To sync users correctly, reassign them from the <strong>Assignments</strong> tab. If a group contains the affected users, you can reassign the group instead.</p></td><td rowspan='1' colSpan='1' data-colwidth='80'><p data-renderer-start-pos='12395'>No</p></td></tr><tr><td rowspan='1' colSpan='1' data-colwidth='180'><p data-renderer-start-pos='12403'>(If Azure is your identity provider) Users don't sync to the organization directory and you're unable to troubleshoot with the error description from the Azure log.</p></td><td rowspan='1' colSpan='1' data-colwidth='337'><p data-renderer-start-pos='12571'>Configure a second Atlassian app within Azure so that you have one for your SAML single sign-on configuration and one for user provisioning.</p></td><td rowspan='1' colSpan='1' data-colwidth='80'><p data-renderer-start-pos='12715'>No</p></td></tr><tr><td rowspan='1' colSpan='1' data-colwidth='180'><p data-renderer-start-pos='12723'>A user's updated email address can't sync because another user (either from the identity provider or not) already has that email address.</p></td><td rowspan='1' colSpan='1' data-colwidth='337'><p data-renderer-start-pos='12864'>You can either:</p><ul class='ak-ul'><li><p data-renderer-start-pos='12881'>Delete the other user.</p></li><li><p data-renderer-start-pos='12907'>Change the email address of the other user to a different email address.</p></li></ul></td><td rowspan='1' colSpan='1' data-colwidth='80'><p data-renderer-start-pos='12987'>Yes</p></td></tr><tr><td rowspan='1' colSpan='1' data-colwidth='180'><p data-renderer-start-pos='12996'>If you have a group name with the same name as an Atlassian built-in group, you won’t be able to sync the group to your organization from your identity provider.</p><p data-renderer-start-pos='13159'><strong>Built-in groups</strong></p><ol class='ak-ol'><li><p data-renderer-start-pos='13176'>atlassian-addons</p></li><li><p data-renderer-start-pos='13196'>atlassian-addons-admin</p></li><li><p data-renderer-start-pos='13222'>site-admins</p></li><li><p data-renderer-start-pos='13237'>org-admins</p></li><li><p data-renderer-start-pos='13251'>administrators</p></li><li><p data-renderer-start-pos='13269'>system-administrators</p></li></ol></td><td rowspan='1' colSpan='1' data-colwidth='337'><p data-renderer-start-pos='13298'>Go to your identity provider and rename the conflicting group with a name that is different from an Atlassian built-in group name and try syncing again.</p><p data-renderer-start-pos='13452'> </p></td><td rowspan='1' colSpan='1' data-colwidth='80'><p data-renderer-start-pos='13456'>No</p></td></tr></tbody></table></div></div><p data-renderer-start-pos='13466'>We won’t update the listed user attributes in the Atlassian product for users outside of your domain. You will need to manually update them in the Atlassian product.</p></div></div></div></div></div><div data-testid="feedback_buttons" class="feedback"><p class="feedback__question-text">Was this helpful?</p><button class="feedback__yes-button sc-jKJlTe dnzyaD" spacing="default" type="button"><span style="align-self:center;display:inline-flex;flex-wrap:nowrap;max-width:100%;position:relative"><span style="align-items:center;align-self:center;flex:1 1 auto;margin:0 4px;max-width:100%;overflow:hidden;text-overflow:ellipsis;white-space:nowrap;transition:opacity 0.3s;opacity:1">Yes</span></span></button><div class="feedback__no-wrapper"><button class="feedback__no-button sc-jKJlTe dnzyaD" spacing="default" type="button"><span style="align-self:center;display:inline-flex;flex-wrap:nowrap;max-width:100%;position:relative"><span style="align-items:center;align-self:center;flex:1 1 auto;margin:0 4px;max-width:100%;overflow:hidden;text-overflow:ellipsis;white-space:nowrap;transition:opacity 0.3s;opacity:1">No</span></span></button><div class="feedback__dropdown "><label class="Radio__Label-sc-2hlmhw-0 liwvXr"><div class="RadioInput__RadioInputWrapper-uvnzru-0 hDwNJB"><input type="radio" class="RadioInput__HiddenInput-uvnzru-1 iILgrR" name="was-this-helpful-no-reason" value="It wasn't accurate"/><span class="Radio__IconWrapper-sc-2hlmhw-2 gHJZiQ"><span class="Icon__IconWrapper-dyhwwi-0 jkUDCC" aria-label=""><svg width="24" height="24" viewBox="0 0 24 24" focusable="false" role="presentation"><g fill-rule="evenodd"><circle fill="currentColor" cx="12" cy="12" r="6"/><circle fill="inherit" cx="12" cy="12" r="2"/></g></svg></span></span></div><div class="Radio__LabelText-sc-2hlmhw-1 cpdxlQ">It wasn't accurate</div></label><label class="Radio__Label-sc-2hlmhw-0 liwvXr"><div class="RadioInput__RadioInputWrapper-uvnzru-0 hDwNJB"><input type="radio" class="RadioInput__HiddenInput-uvnzru-1 iILgrR" name="was-this-helpful-no-reason" value="It wasn't clear"/><span class="Radio__IconWrapper-sc-2hlmhw-2 gHJZiQ"><span class="Icon__IconWrapper-dyhwwi-0 jkUDCC" aria-label=""><svg width="24" height="24" viewBox="0 0 24 24" focusable="false" role="presentation"><g fill-rule="evenodd"><circle fill="currentColor" cx="12" cy="12" r="6"/><circle fill="inherit" cx="12" cy="12" r="2"/></g></svg></span></span></div><div class="Radio__LabelText-sc-2hlmhw-1 cpdxlQ">It wasn't clear</div></label><label class="Radio__Label-sc-2hlmhw-0 liwvXr"><div class="RadioInput__RadioInputWrapper-uvnzru-0 hDwNJB"><input type="radio" class="RadioInput__HiddenInput-uvnzru-1 iILgrR" name="was-this-helpful-no-reason" value="It wasn't relevant"/><span class="Radio__IconWrapper-sc-2hlmhw-2 gHJZiQ"><span class="Icon__IconWrapper-dyhwwi-0 jkUDCC" aria-label=""><svg width="24" height="24" viewBox="0 0 24 24" focusable="false" role="presentation"><g fill-rule="evenodd"><circle fill="currentColor" cx="12" cy="12" r="6"/><circle fill="inherit" cx="12" cy="12" r="2"/></g></svg></span></span></div><div class="Radio__LabelText-sc-2hlmhw-1 cpdxlQ">It wasn't relevant</div></label></div></div><button class="feedback__report-a-problem issue-collector__button" aria-label="open issue collector" data-plugin-loaded="false">Provide feedback about this article</button></div><div data-testid="additional_help" class="additional-help"><h2 class="sac-h3 title">Still need help?</h2><div class="subtext">The Atlassian Community is here for you.</div><div class="button"><a href="https://community.atlassian.com/t5/custom/page/page-id/create-post-step-1?add-tags=provisioning-users,Not Applicable" rel="nofollow" class="link">Ask the Community</a></div></div></div><div class="sidebar" data-testid="sidebar"><ul class="sidebar__section sidebar__section--topic" data-testid="sibling-pages"><li class=""><a href="/provisioning-users/docs/provision-and-sync-users-from-an-identity-provider/" class="sidebar__heading" data-testid="sibling-section-heading">Provision and sync users from an identity provider</a></li><li class="sidebar__item sidebar__item--current" data-testid="sibling-section-link"><p class="sidebar__link">Understand user provisioning</p></li><li class="sidebar__item" data-testid="sibling-section-link"><a href="/provisioning-users/docs/configure-user-provisioning/" data-testid="atlas_link" class="sidebar__link" data-event-container="sidebar">Configure user provisioning</a></li><li class="sidebar__item" data-testid="sibling-section-link"><a href="/provisioning-users/docs/resolve-group-conflicts-when-syncing-users/" data-testid="atlas_link" class="sidebar__link" data-event-container="sidebar">Resolve group conflicts when syncing users</a></li><li class="sidebar__item" data-testid="sibling-section-link"><a href="/provisioning-users/docs/sync-user-attributes-to-your-organization/" data-testid="atlas_link" class="sidebar__link" data-event-container="sidebar">Sync user attributes to your organization</a></li></ul><div class="sidebar__section sidebar__table-of-contents sidebar__section--hidden-mobile"><span class="sidebar__heading" data-testid="cy_sidebar__heading">On this page</span><a href="/provisioning-users/docs/understand-user-provisioning/#Supported-identity-providers" data-testid="atlas_link" class="sidebar__link">Supported identity providers</a><a href="/provisioning-users/docs/understand-user-provisioning/#Available-attributes-for-mapping" data-testid="atlas_link" class="sidebar__link">Available attributes for mapping</a><a href="/provisioning-users/docs/understand-user-provisioning/#Supported-products" data-testid="atlas_link" class="sidebar__link">Supported products</a><a href="/provisioning-users/docs/understand-user-provisioning/#How-user-provisioning-works" data-testid="atlas_link" class="sidebar__link">How user provisioning works</a><a href="/provisioning-users/docs/understand-user-provisioning/#Allowed-number-of-groups-and-users" data-testid="atlas_link" class="sidebar__link">Allowed number of groups and users</a><a href="/provisioning-users/docs/understand-user-provisioning/#Users-and-groups-sync-from-your-identity-provider-to-your-organization" data-testid="atlas_link" class="sidebar__link">Users and groups sync from your identity provider to your organization</a><a href="/provisioning-users/docs/understand-user-provisioning/#Your-organization’s-directory-syncs-to-all-associated-sites" data-testid="atlas_link" class="sidebar__link">Your organization’s directory syncs to all associated sites</a><a href="/provisioning-users/docs/understand-user-provisioning/#Groups-get-assigned-to-products" data-testid="atlas_link" class="sidebar__link">Groups get assigned to products</a><a href="/provisioning-users/docs/understand-user-provisioning/#User-provisioning-features" data-testid="atlas_link" class="sidebar__link">User provisioning features</a><a href="/provisioning-users/docs/understand-user-provisioning/#Manage-group-names" data-testid="atlas_link" class="sidebar__link">Manage group names</a><a href="/provisioning-users/docs/understand-user-provisioning/#Resolve-group-conflicts" data-testid="atlas_link" class="sidebar__link">Resolve group conflicts</a><a href="/provisioning-users/docs/understand-user-provisioning/#Supported-user-account-operations" data-testid="atlas_link" class="sidebar__link">Supported user account operations</a><a href="/provisioning-users/docs/understand-user-provisioning/#Supported-group-operations" data-testid="atlas_link" class="sidebar__link">Supported group operations</a><a href="/provisioning-users/docs/understand-user-provisioning/#Troubleshooting" data-testid="atlas_link" class="sidebar__link">Troubleshooting</a></div><div data-testid="community-sidebar-nav" class="sidebar__section"><span class="sidebar__heading">Community</span><a href="https://community.atlassian.com/t5/Interests/ct-p/interests" data-testid="atlas_link" class="sidebar__link">Questions, discussions, and articles</a></div></div></article></main></div></div><footer class="footer margin-top-large"><div class="footer__inner-container"><div class="footer__inner-content"><a href="https://www.atlassian.com"><img src="https://images.ctfassets.net/zsv3d0ugroxu/2sOh4sF3DSm8Qy8GigKK0S/1c7619d9db378c5ee902d8eeb8fde65b/atlassian-logo-footer.svg" alt="Atlassian Logo" class="footer__icon"/></a><div class="footer__links"><ul><li><a href="https://www.atlassian.com/accessibility" data-testid="atlas_link" class="footerAccessiblity">Accessibility</a></li><li class="atl-policy-link-container"><a href=" https://www.atlassian.com/legal/privacy-policy#additional-disclosures-for-ca-residents" data-testid="atlas_link" class="atl-policy-link atl-policy-link-text">Notice at Collection</a></li><li><a href="https://www.atlassian.com/legal/privacy-policy" data-testid="atlas_link">Privacy Policy</a></li><li><a href="https://www.atlassian.com/legal/cloud-terms-of-service" data-testid="atlas_link">Terms of Use</a></li><li><a href="https://www.atlassian.com/security" data-testid="atlas_link">Security</a></li><li>2024 Atlassian</li></ul></div></div></div></footer></div></div> </body> <script> document.body.addEventListener( "error", (event) => { if (!event.target) return; if (event.target.tagName === "SCRIPT") { Sentry.captureMessage( "Failed to load script: " + event.target.src, "warning" ); } }, true // useCapture - necessary for resource loading errors ); </script> </html>