This page contains information about how to set up Azure AD and User & Group Sync for Atlassian Server or Data Center applications.
When you encounter different wording, please contact us and we will update the documentation.

Video Guide  

Quickstart guide

Go to, click "Azure Active Directory" in the left panel and then choose "App registrations".

  1. Click on "New registration"
  2. Enter a "Name" for the app.
  3. Click on "Register".
  4. On this page you can see the "Application ID" and the "Directory (tenant) ID". You will need both to setup the Azure AD connector in User Sync.
  5. Click on "API permissions" in the left panel.
  6. Delete the default created permission since it's not needed.
  7. Click on "Add a permission" and choose "Microsoft Graph".
  8. Click on "Application Permissions".
  9. Search for the "Directory" entry, expand it and tick "Directory.Read.All".
  10. Click on "Add permissions" to add the permissions.
  11. Click on "Grant admin consent for ...".
  12. Next, click on "Certificate & secrets".
  13. Add a new Client secret by click on "New client secret".
  14. Enter a description for the secret and also set an expiry date. Click on Add to confirm.
  15. Copy the secret now ("VALUE"). You are not able to see it again after leaving that page. Please paste it to a text editor for the tutorial.

Now it is time to configure User & Group Sync in your Atlassian Server or Data Center product. Please keep the Azure website open, because we will need it later on.

  1. Now, go back to your Atlassian Server or Data Center product, and go to the User & Group Sync Configuration.
  2. Click Create Connector and choose Azure.
  3. First, paste the client secret (which you copied before) into the Application Secret.
  4. Next, go back to the Azure website and click Properties in the app you have created for User & Group Sync. Copy the Application ID and Directory (Tenant) ID and paste them into the User & Group Sync configuration in your Atlassian product.
  5. In the User & Group Sync configuration under the Sync Settings tab, activate Scheduled Synchronization. You can edit the Cron expression to set a synchronisation interval.

User guide 

Go to and click the Azure Active Directory.

In the Azure Active Directory, click App registrations.

Click New registration to create a new app.

Enter a name for your application and click on Register to proceed.

Click API permissions in the left panel.

Delete the default created permission since it's not needed.

Click on Add a permission.

Select Microsoft Graph.

Choose Application permissions.

Expand Directory and tick Directory.Read.All

From SAML version 6.3.0 or User Sync 2.7.0 User Sync also supports synching the profile pictures of users in Azure AD. To be able to use this feature you additionally need to add User.Read.All as permission. 

Click on "Grant admin consent for ...".

It should look like this after granting admin consent:

For the next step, click on Certificates & secrets in the left panel, and then click on New client secret.

Enter a description for the secret and also set an expiry date. Click on Add to confirm.

Please note that your secret will expire after 24 months. If syncs start failing in 24 months, you must create a new secret and update the secret in the connector.

Your Client secret will displayed only once, thus copy the secret. Of course, it is possible to create a new secret, if you lost your secret.

Go overview page of the Azure AD app. Copy the Application ID and the Directory (tenant ID). Now, it is time to head over to your Atlassian application.

In your Atlassian application, go to User Sync,  click Create Connector, and choose Azure.

Add the Application ID, Directory ID, and the Application secret. Use the Save and Test Connection button to check whether Azure's API endpoints are reachable and API permissions are set correctly.

To take full advantage of User Sync, go to the Sync Settings tab and enable "Scheduled Synchronization". You can control the sync interval via a Cron Expression.
Do not forget to save your configuration by clicking on "Save and Return".

You are now ready to toggle a full sync. Simply click the "Sync" button.

Please read here, if you already have users in your system which you want to migrate, without losing their history. Don't hesitate to reach out to, if you need any help with achieving this. 

Additional Resources: