Contents

Jira Cloud User Provisioning (SCIM) for Microsoft Entra ID (Previously known as Azure AD)

User Sync & Group Sync app sync user and group information from Microsoft Entra ID (Previously known as Azure AD) to Jira Cloud. This way the administrator only needs to manage user accounts in Microsoft Entra ID (Previously known as Azure AD). This reduces the administration time required to create users and groups in Atlassian modules such as Jira Cloud.

Download And Installation

Log into your atlassian instance as admin.
Navigate to the settings menu and Click Manage Apps.
Click on Find new apps .
Locate miniOrange User and Group Sync app.
Click Try free to begin a new trial or Buy now to purchase a license.
Enter your information and click Generate license when redirected to MyAtlassian.
Click Apply license.

Step 1: Setup Microsoft Entra ID (Previously known as Azure AD) SCIM Configurations

Log in to your Microsoft Entra ID (Previously known as Azure AD) portal and select the Microsoft Entra ID. Then create an Enterprise application.

User provisioning with Azure AD of SCIM Standard - Login to Azure AD portal

Click on New Application and select non-gallery application.

User provisioning with Azure AD of SCIM Standard - In Azure AD portal Add new application

Give suitable name to your user provisioning application.

User provisioning with Azure AD of SCIM Standard Applicaiton Name SCIM_User_provisioning

Click on Provisioning in left menu and click on Get started.

User provisioning with Azure AD of SCIM Standard- Provisioning screen to manage user account

Select Automatic in Provisioning Mode and Enter SCIM Base URL, SCIM Bearer Token (which you will find in step 2) .

User provisioning with Azure AD of SCIM Standard chose Provisioning Mode Automatic

Assign users to your applicartion. Assigned users will be created in your Atlassian module if they are not already present. You can also assign groups. Member of assigned groups will be provisioned for Atlassian module.

User provisioning with Azure AD of SCIM Standard Assign users and groups to application

Once done with configuration, Go back to application and click on Start provisioning.

User provisioning with Azure AD of SCIM Standard Start Provisioning option

Step 2: Configure API token

2.1: User Sync

Setup API Token by clicking Configure API Token button.
Enter your Admin Email
Generate your own API token. Please refer this document here .
Please enter Application Name and click on Submit button. Copy the SCIM Base URL and SCIM Bearer Token, these will be used later to configure SCIM application on miniOrange IDP.

2.2: Customer Sync

In the Configuration tab, please select the IDP provider.

Select the Customer Sync option.

In the SCIM configuration, Please enter the App Name and click on the Save Settings button. Copy the Customer Base URL and Customer Bearer Token, these will be used later to configure the SCIM application on the IDP provider.

In the Group Mapping setting add the group from which you want to give permission to the project.
eg:- If you have a private Project name:- Demo service project and you have IDP group name:- Jira-Service-group. So if we provision user who has Jira-Service-group assigned in Plugin group mapping, he will get access to the portal of Demo Service Project.

Step 3: Provisioning Operations

Enable Import Users option to create users automatically if they do not exist in Jira.
Enable Import Groups option to create groups automatically if they do not exist in Jira.

User and gruop provisioning in Jira, Confluence, Bitbucket Select Provider

Click on Submit.

Step 4: Multiple IDPs

The plugin allows for configuring multiple IDPs on your SP to accommodate your specific use case. To add another IDP, simply navigate to the "Configured IDPs" section.