| Info |
|---|
These guides assume that you have set up and configured one of the supported Identity Providers, currently Microsoft Entra ID. |
Problem description
If you’re using User Provisioning with IDP-synchronized groups to assign licenses, you may encounter the following circular problem with User Cleanup:
User Cleanup removes product access for users in Jira/Confluence.
Removed Jira/Confluence users will automatically regain access during the next synch with your Identity Provider.
Solution options
To avoid this problem and enable license removal for users in IDP-synchronized groups, you have two options:If your company prefers that user management across different software installations is handled in one central IDP, Automated User Cleanup & Deactivation has two options to support keeping the local Jira/Confluence user base in synch with the central IDP.
Manage all product access groups in Atlassian: Shift your licensing groups to be managed directly through Atlassian.
Set up an identity provider (IDP) within the app: By configuring an IDP, our User Cleanup app can generate CSV files listing users who need to be removed from an identity group. You can then remove these users using scripts or the IDP’s bulk removal tools.
...