SAML Single Sign On Setup Guides for SAML SSO Current: AWS AWS Below, you find information to setup SSO for AWS and our apps. If you our need help or have questions, you can contact us via our helpdesk or book a free screen share session at https://resolution.de/go/calendly.Step-by-Step GuidesBased on your user provisioning model, pick one of the following step-by-step guides. AWS with Just-In-Time ProvisioningSetting up authentication via SAML with AWS and using Jut-in-Time provisioning to create/update user accounts during login.AWS does not support transmitting groups via SAML attributes. Hence, groups must be managed locally in your Atlassian product.AWS with Manual ProvisioningSetting up authentication via SAML with AWS for users that already exist in the Atlassian product. Which Step-by-Step Guide you should pick?Depending on your Atlassian product, you can choose from different user provisioning models.In general, with AWS we support the following ways for user provisioning:Just in Time Provisioning allows to create and update users on-the-fly when they log in. It is not possible to send groups via SAML for AWS. Thus, groups must be managed locally. See our detailed article for JIT.LDAP synchronisation from Active Directory. If you instance still synchronised to your Active Directory via LDAP, you can continue to do so. Please follow the "Manual User Management" Guide in this scenario.For Manual User Management, the administrator has to has to create and update users on AWS and your Atlassian product by hand.We do not recommend it. See our article for Manual User Management.Model/FunctionAdmin EffortPro's and Con'sJust in Time ProvisioningMedium,need to manage groups locally on your product instanceCreates & Updates users based on information in the SAML Response during LoginAWS does NOT support transmitting groups.Users are only created on their first Login.Users & Groups are updated only during SAML authentication.Users cannot be marked disabled (as AWS will not complete the Authentication for a deleted/disabled User)Manual User ManagementHighHere no sync happensNeeds manual maintenance of 2 User bases (or is done via custom developments).