Contents

User and Group Sync for Okta

User Sync & Group Sync app syncs user and group information from Okta to Jira, Confluence and Bitbucket. Users, groups and directory details can by synced user group attributes. Sync can be performed manually, scheduled to run after set time intervals, or during user login.
This way the administrator only needs to manage user accounts in Okta. This reduces the administration time required to create users and groups in Atlassian modules such as Jira, Confluence and Bitbucket.

Download And Installation

Log into your atlassian instance as admin.
Navigate to the settings menu and Click Manage Apps.
Click on Find new apps .
Locate miniOrange User and Group Sync app.
Click Try free to begin a new trial or Buy now to purchase a license.
Enter your information and click Generate license when redirected to MyAtlassian.
Click Apply license.

Step 1: Setup Okta

First of all, go to https://www.okta.com/login/ and login to your Okta organisation as a user with administrator privileges
Click on admin blue button and this will redirect you to admin console

sync users, groups and directory details using Okta into Jira and Confluence

Go to Security from the Left Menu and select API. Now go to the Tokens tab and click on Create Token button.

Enter the token name and click on Create Token Button.

Now, Copy token value and keep it handly this will be required while setting up app in Atlassian module.

Also , Copy Okta domain URL, Your Okta domain will look like https://example.oktapreview.com, https://example.okta.com, https://example.okta-emea.com.

Step 2: Setup User Sync & Group Sync app

Open User Provisioning/Sync for Bitbucket plugin configuration. Go to the Configuration tab. Select Okta from the options.

Fill in values according to the table below.

App Name	Enter unique name which you can identify in applist after configuration.
Okta Domain URL	Enter Okta Okta Domain URL. Your Okta domain url looks like example.oktapreview.com
Okta API	Enter the Okta API. You will find it from Okta Admin Dashboard->Security->API->Tokens.In case you haven't created, Click on the Create to generate a new Token for Provisioning.
Okta App ID	Enter the app id of the app you have created inside okta
Set Scheduler Time Interval	To synchronize user and group information, choose the scheduler time interval.

click on Save Settings.

Step 3: User Sync Settings

Select the User Sync Settings tab from the left sidebar. Here you can configure different settings about user creation and updation.

User and gruop provisioning in Jira, Confluence, Bitbucket User Sync

You can select the directory or can create a new one. Furthermore, you can choose from the following operations for provisioning users.
You also have an option to set Default Project Lead and Default Component Lead.

Step 4: Group Sync Settings

Select the Group Sync Settings tab from the left sidebar. Here you can configure different settings about group creation and group mapping.

User and gruop provisioning in Jira, Confluence, Bitbucket Group Sync

Here you can configure Default groups for new and all users.
You can set Manual Group Mapping or On-The Fly Group Mapping.

1. Manual Group Mapping -

Here you can manually map Bitbucket groups with the groups from IDP.
You can also configure to import IDP groups, filter groups and whether to keep existing users or not.

User and gruop provisioning in Jira, Confluence, Bitbucket Manual Group Mapping

2. On-The Fly Group Mapping -

Here users will be assigned to groups in Bitbucket whose group name is the same as groups from IDP. If the group doesn't exist in Bitbucket then it will be created.
You can configure to keep the existing user groups, filter groups and apply regular expressions on the groups.

User and gruop provisioning in Jira, Confluence, Bitbucket On The Fly Group Mapping

Step 5: Synchronization Process

To perform user sync, click on the Synchronize option of your newly created app.
When the synchronization is complete, you will be able to view newly created and updated user information in Bitbucket User Management section.

User and gruop provisioning in Jira, Confluence, Bitbucket Synchronize

6: Multiple IDPs Settings

The plugin allows for configuring SCIM provisioning on your SP (Service Provider) to accommodate your specific use case. To add another IDP, simply navigate to the "Configured IDPs" section. Select on Add new App to configure multiple provisioning connections.