
## Automate User Provisioning in Atlassian apps with miniOrange User Sync ⚙️ 👤 {#Automate User Provisioning in Atlassian apps }

Licensing has become a dicey subject and the budget pressure on companies is on an entirely different level. As your company grows, manually managing the entire Access Management is a hassle. For every user or employee of the company that uses Jira, Confluence or Service Management, they must have the necessary access rights in order for them to work efficiently. 

&nbsp;&nbsp;

Your Organization can suffer from a series of difficulties with manual process:

1. **Poor Onboarding Experience:** as new employees join, they wait for their Jira, Confluence account while the IT team take time off their schedule

&nbsp;&nbsp;

2. **Time Constraints:** With constant changes in organizations like promotions, revamped job descriptions, gaining the right access for employees is a time taking process. Without automated processes to align permissions and application access, the time taken to bring in these changes can sink your productivity.

&nbsp;&nbsp;

3. **Higher licensing Costs and Security Risks:** According to estimates, **30% of all Atlassian user licenses are unused**. This happens because users that leave the organization or change roles don’t have their accounts deactivated in a timely manner. This can have negative consequences, like exceeding license limits leading to an **increase in licensing costs**. Retaining access from former employees – poses a major security concerns. This is a major concern for confidential information of your company.

&nbsp;&nbsp;

You need to constantly make sure that the product access is limited to those who still have a valid business purpose and they have access to only what they have to need. **Manually provisioning users/groups makes it absolutely intolerable and inefficient. This not only increases the workload but also means duplicate work for the administrator.**

With the help of user provisioning the user accounts are automatically created, given proper permissions, and maintained across all Atlassian applications. 

1. Keep your Atlassian instances 100% accurate with user provisioning so that all your Atlassian users are up to date and have access to what they need. [User provisioning].

2. Disable, deactivate or delete inactive users (user deprovisioning) automatically after x days. 

3. Manage group membership on the Central Identity Provider to make sure every user has the right permissions and see the right projects. 

At this point you must be wondering how I can automate User provisioning in Atlassian applications. 


### How to Automate User Provisioning in Atlassian Cloud {#How to Automate User Provisioning}

[MiniOrange User Provisioning](https://marketplace.atlassian.com/apps/1222000/mo-scim-provisioning-user-sync-group-sync-for-jira?hosting=cloud&tab=overview) automatically synchronizes changes made in your identity provider into the Atlassian apps and keeps your Atlassian cloud access always up to date. With miniOrange user sync you will be able to do the following and manage your users more effectively:

1. No prerequisites are required – Atlassian Access is not required. 

2. Streamline the process of adding, updating as well as managing their access for Atlassian apps [User Provisioning].

3. Whenever a user is deactivated in the identity provider, user Sync automatically deprovision/disable them in your Atlassian apps in the next sync and ultimately save licensing costs. [ User Deprovisioning].

### How to Automate User Provisioning in Atlassian Data Center {#How to Automate User Provisioning in Atlassian Data Center}

With the help of [miniOrange User Provisioning](https://marketplace.atlassian.com/search?query=miniOrange%20user%20sync), changes in your identity provider will be synchronized in Atlassian apps with one click. 


1. **Synchronize User Directories:** with user directories being synchronized, new users will automatically be added in the respective Atlassian applications. You can also schedule synchronization which provides proactive provisioning and de-provisioning of users and groups at regular intervals (sync).

2. **Default Group Mapping:** assign default groups in your Jira instance for each synced user and make sure that they are given the application access and not removed during a sync.

3.**Manual Group Mapping:** Assign permissions to users even if groups don’t match between IDP and Atlassian instance. 

4. Compatible with using [miniOrange SAML SSO](https://marketplace.atlassian.com/search?query=saml%20miniOrange) for authentication.


Additional functionalities provided in miniOrange User Provisioning

- Scheduled User Synchronization via API 
- Attribute Mapping 
- Username and Group Transformation 
- Supports SCIM 1.1 and SCIM 2.0 protocols
- Filter users by groups & filter groups to be assigned & removed  

### Conclusion: {#Conclusion}

Automating User Provisioning is not an option, it’s a must for any modern enterprise that takes security and usability seriously. It’s really easy to manage users automatically via our developed user provisioning add-ons which can be connected with your IDPs ([Azure AD](https://miniorange.com/atlassian/jira-scim-user-and-group-provisioning-for-azure-ad), [Okta](https://miniorange.com/atlassian/jira-scim-user-and-group-provisioning-for-okta), [OneLogin](https://miniorange.com/atlassian/jira-scim-user-and-group-provisioning-for-onelogin)) or any other SCIM compliance applications so when you setup your Jira Azure AD SCIM or Jira Okta SCIM, user sync plugin will make it a cakewalk for you.  

The add-on also works with [Single Sign On](https://marketplace.atlassian.com/search?query=miniOrange%20Single%20Sign%20On%20) where SSO is used for authentication and User sync application is used for automatic provisioning. You can also check out our other user Management add-ons on the Marketplace which helps removing unused licenses and ultimately save licensing costs for all your Atlassian instances.

Licensing has become a dicey subject and the budget pressure on companies is on an entirely different level. As your company grows, manually managing the entire Access Management is a hassle.

Automate User Provisioning in Atlassian apps with miniOrange User Sync ⚙️ 👤


## Seamless SSO and Identity Management {#seamless-sso-and-identity-management}

In the ever-evolving landscape of digital identity, achieving simplicity and efficiency is paramount. With the latest upgrade to the miniOrange SAML plugins, we're excited to announce the seamless integration of SCIM (System for Cross-domain Identity Management). This transformative addition, bundled for free with the miniOrange SAML plugins, brings a new dimension to your identity management strategy. 

&nbsp;

**This upgrade is available for all the following plugins:-**
1. [JIRA SAML Plugin](https://marketplace.atlassian.com/apps/1215430/mo-jira-saml-sso-single-sign-on-jira-sso-login?hosting=datacenter&tab=overview)
2. [Confluence SAML Plugin](https://marketplace.atlassian.com/apps/1215542/mo-confluence-saml-sso-single-sign-on-confluence-sso-login?hosting=datacenter&tab=overview)
3. [Bitbucket SAML Plugin](https://marketplace.atlassian.com/apps/1216482/mo-bitbucket-saml-sso-single-sign-on-bitbucket-sso-login?hosting=datacenter&tab=overview)

### Unlocking Synergy: SAML and SCIM in Harmony {#unlocking-synergy-saml-and-scim-in-harmony}

**Effortless Onboarding and Offboarding** 🧑‍🤝‍🧑
Imagine a new team member, Sarah, joining your organization. SAML seamlessly grants her access across applications with Single Sign-On (SSO). Before that, SCIM works behind the scenes, instantly creating her accounts and access rights. When another employee John leaves the company, SCIM steps in again, ensuring immediate removal of his access across all applications without manual intervention.

&nbsp;

**Streamlined User Attribute Management** 🚴
Maintaining consistency in user attributes is crucial. For instance, when Sarah gets promoted and joins a new team, SCIM ensures her updated role and group memberships are uniformly reflected across all applications. This meticulous approach eliminates discrepancies in user profiles and enhances accuracy.

&nbsp;

**Enhanced Security through Real-time Access Management** ⏳
Picture this: David, a team member, is terminated. SAML provides secure and straight forward authentication, and when combined with SCIM, it allows you to instantly revoke David's access. This immediate response fortifies your security posture and minimizes potential risks by promptly removing access for deactivated or terminated users.

&nbsp;

**Scalable Identity Management for Growing Organizations** 🦸
As your organization expands, managing user identities can become complex. SAML ensures a unified and secure authentication process. Now, consider Sarah's team growing. SCIM simplifies the complexity of user provisioning, allowing you to easily scale your identity management processes without compromising efficiency. In this dynamic scenario, imagine new team members joining rapidly. SCIM, the superhero of identity management, automates user provisioning, ensuring seamless access for new members to the tools they need. This dual approach of SAML and SCIM not only guarantees a secure authentication process but also streamlines identity management, making it agile and scalable as your organization evolves.

&nbsp;

### How to Experience the Synergy: {#how-to-experience-the-synergy}

1. Update Your miniOrange SAML Plugin to the latest version.
2. Go to the “SCIM” tab in the settings section. You need to download the SCIM plugin separately but it will be available at no extra cost once you purchase our SAML plugin.
3. Here, you can seamlessly configure and customize your SCIM settings to align with your organization's requirements.
4. Once configured, witness the harmonious collaboration between SAML and SCIM. Enjoy the benefits of secure SSO and automated user provisioning, making identity management a smooth and efficient process.

&nbsp;

**Elevate Your Identity Management Strategy** 👆
With SAML and SCIM working in tandem, miniOrange offers a robust solution for organizations seeking a streamlined, secure, and scalable identity management strategy. Upgrade your miniOrange SAML plugin today to unlock the combined power of SAML and SCIM, where simplicity meets security in the realm of digital identity.



In the ever-evolving landscape of digital identity, achieving simplicity and efficiency is paramount. With the latest upgrade to the miniOrange SAML plugins, we're excited to announce the seamless integration of SCIM.

Automate User Provisioning in Atlassian apps with miniOrange User Sync ⚙️ 👤

Seamless SSO and Identity Management: Unleashing the Power of SAML and SCIM Integration in miniOrange Plugin 🚀