User Sync is a feature of our SAML SSO plugin.
It allows to (periodically) sync users from Azure AD, Okta, GSuite, OneLogin and Keycloak to your Atlassian product instance.
It also provides functions similar to LDAP and can be used if LDAP is not an option for you.

Advantages

  • Similar advantages than LDAP
  • User Sync has even more advanced functionality:
    • Allows for group transformations. If you have a group at your IdP, but you want to rename it for your Atlassian product, User Sync can do this. E.g. a group called "users" on the Idp side can be transferred to "jira-users" for Jira.
    • Assign local groups automatically. E.g. for a Confluence instance, assign "confluence-users" automatically.
    • Black/White listing. Block certain groups from being synced or only allow special groups to be synced.
    • Use a Cron expression for scheduling a sync.

Disadvantages

  • In contrast to LDAP, users can not log in with their local password. No passwords will be synced and there is no mechanism for User Sync to ask the IdP to validate the user.
  • It is currently only available for Jira, Confluence, BitBucket and Bamboo. Additionally, only Azure AD, Okta, GSuite, OneLogin and Keycloak are supported as of the time of writing.