Atlassian Apps (Atlassian Access, Bitbucket, Confluence, Jira)

Atlassian provides a suite of software products that millions of users globally rely on for improving software development, project management, collaboration, and code quality.

Rippling supports multiple integrations across Atlassian’s primary software products. It is important to understand the differences between each Atlassian application, as well as which integration should be used to meet your organization’s use case.

Rippling’s Atlassian integrations allow Rippling customers to connect the following products for provisioning, de-provisioning and SAML-based SSO.

  1. Atlassian Access (Atlassian) 
  2. Bitbucket
  3. Jira
  4. Confluence

Best Practices

  1. We recommend using a service account within your third-party applications when installing an integration. This entails creating an admin account within the third-party application to use for administrative purposes. This allows for your company’s administrators to have better control and access over the admin account, as well as prevents difficult situations from arising if you have an admin depart.
  2. With any SAML-based SSO connections, if you plan to uninstall your SAML SSO application, please ensure that you have disabled SSO from the third-party application, prior to uninstalling the integration from Rippling. This is to ensure that you are never locked out of your account.

Atlassian

Atlassian Overview and When to Use

Atlassian applications rely on Atlassian Access for identity management. Atlassian Access offers an enterprise-wide subscription for enhanced security and centralized administration that works across every Atlassian cloud product. If your organization relies on more than one of the following Atlassian products, or is familiar with Atlassian as a product, then this integration will likely provide you the most flexibility, as it will support provisioning to Confluence, Jira, and ServiceDesk. Please note, Bitbucket must be accessed through its own distinct integrations. Additionally, if you want to provide your employees with SSO to any of the specific Atlassian applications, then you should install the application as an additional integration as well.

Please note, in order to use the Atlassian Access integration, you must verify your organization’s domain. Atlassian walks you through the steps to do this if you sign in and select ‘Directory’ > ‘Domains’ > ‘Verify Domain’.

The Atlassian integration enables your organization admin to provide users access to any Atlassian product by use of the Groups tab within the integration. The connection leverages an API key in order to connect your Rippling account to Atlassian for user provisioning / de-provisioning and SAML-based SSO.

Monitoring Your Atlassian Account

With the Atlassian integration, you’re able to monitor the various Atlassian licenses that are in use by your organization. From your ‘Overview’ tab, you can create new users, remove users, or simply view your employee account statuses or their Atlassian groups.

Managing Your Atlassian Account

The Atlassian integration enables you to control your organization’s access to your various Atlassian products. Rippling will assign your purchased Atlassian licenses to your users, although the licenses must be purchased from directly within Atlassian. In order to assign your organization’s licenses, Rippling syncs over user groups from Atlassian which are associated with product licenses. Your Atlassian admin may then assign individual employees or groups of employees to those groups to provide them with product access.

Integration Details

Integration Type: API-Based Provisioning (API Key), SAML Single Sign-on

Data Shared: First Name, Last Name, Email Address

Integration Features: Creating Atlassian accounts (product-agnostic), removing Atlassian accounts (product-agnostic), Managing access to Atlassian products through Groups

Bitbucket

Bitbucket Overview and When to Use

Bitbucket allows your team to collaborate on code with inline comments and pull requests through Atlassian’s version control repository hosting service. The Bitbucket integration allows you to access and manage your Bitbucket account, but no other Atlassian products. It’s recommended to use this application if 1) you need single sign-on directly to Bitbucket for your employees or 2) you have the need for a Bitbucket integration and do not want to handle the full scope of the Atlassian integration.

Please note, Bitbucket access management is not included within Atlassian access management, so it is not included within the Atlassian integration.

Monitoring Your Bitbucket Account

With the Bitbucket integration, you’re able to monitor the various Bitbucket licenses that are in use by your organization. From your ‘Overview’ tab, you can create new users, remove users, or simply view your employee account statuses or their Bitbucket groups.

Managing Your Bitbucket Account

The Bitbucket integration enables you to control your organization’s access to Bitbucket account via API. Rippling will assign your purchased Bitbucket licenses to your users, although the licenses must be purchased from directly within Atlassian. In order to assign your organization’s licenses, Rippling syncs over user groups from Bitbucket. Bitbucket groups must be defined within Bitbucket, but allow you specify rules that apply to multiple users Your Bitbucket admin may then assign individual employees or groups of employees to those groups to provide them with product access.

Integration Details

Integration Type: API-Based Provisioning (OAuth), SAML Single Sign-on

Data Shared: First Name, Last Name, Email Address

Integration Features: Creating Bitbucket accounts, removing Bitbucket accounts, Managing Bitbucket user groups. Bitbucket user groups allow you to provide groups of users specified access to your repositories.

Confluence

Confluence Overview and When to Use

Confluence is a collaboration software that enables your teams to share and document knowledge efficiently.  The Confluence integration allows you to access and manage your Confluence account, but no other Atlassian products. It’s recommended to use this application if 1) you need single sign-on directly to Confluence for your employees or 2) you only have the need for a Confluence integration and do not want to handle the full scope of the Atlassian integration.

Monitoring Your Confluence Account

With the Confluence SSO integration, you’re able to monitor which of your employees have access to Confluence, as well as when they were or will be granted access. From your ‘Overview’ tab, you can create also invite or revoke account access from your employees as needed.

Managing Your Confluence Account

The Confluence integration enables you to control your organization’s access to Confluence account via SAML Single Sign-on and just-in-time provisioning. Due to the constraints of SAML-based provisioning, although you can decide when a user will be invited to join, you cannot determine the exact point in time in which the account will be created. Confluence accounts will be created upon your employee’s first login attempt. Additionally, the integration does enable the syncing of Groups, but custom access rules can still be determined defined from the ‘Access Rules’ tab.

Integration Details

Integration Type: Just-in-Time User Provisioning, SAML Single Sign-on

Data Shared: First Name, Last Name, Email Address

Integration Features: Creating Confluence accounts, Single Sign-on to Confluence, Account statuses, Revoking SSO access

Jira

Jira Overview and When to Use

Jira is a work management tool that meets use cases from requirements and test case management to agile software development. The Jira integration allows you to access and manage your Jira account, but no other Atlassian products. It’s recommended to use this application if 1) you need single sign-on directly to Jira for your employees or 2) you only have the need for a Jira integration and do not want to handle the full scope of the Atlassian integration.

Monitoring Your Jira Account

With the Jira integration, you’re able to monitor the various Jira licenses that are in use by your organization. From your ‘Overview’ tab, you can create new users, remove users, or simply view your employee account statuses or their Jira groups.

Managing Your Jira Account

The Jira integration enables you to control your organization’s access to Jira account via API. Rippling will assign your purchased Jira licenses to your users, although the licenses must be purchased from directly within Jira. In order to assign your organization’s licenses, Rippling syncs over user groups from Jira. Jira groups must be defined within Jira, but allow you specify rules that apply to multiple users Your Jira admin may then assign individual employees or groups of employees to those groups to provide them with product access.

Integration Details

Integration Type: API-Based Provisioning (API Key), SAML Single Sign-on

Data Shared: First Name, Last Name, Email Address

Integration Features: Creating Jira accounts, removing Jira accounts, Managing access to Jira groups

Frequently Asked Questions

What should I do in the case of our account admin leaving?

If you use a service account within your Atlassian applications (this is applicable to all Atlassian applications aside from Confluence), you should match the service account to your organization’s new admin. You will need to test the connection continues to work, and you may need to re-install the application and generate a new API key.

If you did not use a service account within your Atlassian applications, you can have the previous admin transfer ownership of their Atlassian cloud services to your organization’s new admin. For more information on how to do this, please see this article.

As for any SAML-based SSO connections, if you plan to uninstall your SAML SSO application, please ensure that you have disabled SSO from the third-party application, prior to uninstalling the integration from Rippling. This is to ensure that you are never locked out of your account.