From 21943da3a0ccfd7e4eee28df350e247792e84a57 Mon Sep 17 00:00:00 2001 From: Alejandro Bernal Date: Mon, 2 Feb 2026 11:45:37 -0500 Subject: [PATCH 1/3] add docs for atlassian account provisioning --- baton/atlassian.mdx | 38 ++++++++++++++++++++++++++++++++++++-- 1 file changed, 36 insertions(+), 2 deletions(-) diff --git a/baton/atlassian.mdx b/baton/atlassian.mdx index ef02526..8948b7f 100644 --- a/baton/atlassian.mdx +++ b/baton/atlassian.mdx @@ -10,12 +10,14 @@ sidebarTitle: "Atlassian" | Resource | Sync | Provision | | :--- | :--- | :--- | -| Accounts | | | +| Accounts | | | | Workspaces | | | | Groups | | | This connector can provision roles in Atlassian workspaces. Depending on your Atlassian implementation, not all roles may be available for all workspaces, and some roles can be only configured if the user meets certain requirements. The Atlassian connector is unable to predict whether a role will be available to a user before the role is requested, but the connector will show an error if a requested role cannot be provisioned. +The Atlassian connector supports [automatic account provisioning](/product/admin/account-provisioning) via SCIM API. New users are created without passwords and receive invitation emails to activate their accounts. + ## Gather Atlassian credentials Each setup method requires you to pass in credentials generated in Atlassian. Gather these credentials before you move on. @@ -50,6 +52,28 @@ A user with the **Org admin** role in Atlassian must perform this task. +### Gather SCIM credentials for account provisioning (Optional) + +If you plan to use account provisioning to create new users, you'll need SCIM API credentials. + + + + Log into [your Atlassian account](https://admin.atlassian.com/). + + + Navigate to **Security** > **User Security** > **Identity Providers**. + + + Configure an identity provider with provisioning enabled. After configuring it, you will + get a window with both: + - The **SCIM token** (`BATON_SCIM_TOKEN`) + - The **SCIM base URL** (`BATON_SCIM_BASE_URL`) + + + Carefully copy and save both values. You'll need them to configure account provisioning. + + + ### Optional: Request endpoints for provisioning support If you want to provision workspace roles with the connector, you must raise an Atlassian Support ticket asking the Atlassian team to enable certain necessary endpoints on your tenant. @@ -137,6 +161,12 @@ If you want to provision workspace roles with the connector, you must raise an A Paste the organization ID into into the **Organization ID** field. + (Optional) If using account provisioning, paste the SCIM token into the **SCIM Token** field. + + + (Optional) If using account provisioning, paste the SCIM base URL into the **SCIM Base URL** field. + + Click **Save**. @@ -200,13 +230,17 @@ stringData: # ConductorOne credentials BATON_CLIENT_ID: BATON_CLIENT_SECRET: - + # Atlassian credentials BATON_API_TOKEN: BATON_ORG: # Optional: include if you want ConductorOne to provision access using this connector BATON_PROVISIONING: true + + # Optional: include for account provisioning (creating new users) + BATON_SCIM_TOKEN: + BATON_SCIM_BASE_URL: ``` See the connector's README or run `--help` to see all available configuration flags and environment variables. From 615967414153529070cc51006a2e245d5fba0ab0 Mon Sep 17 00:00:00 2001 From: Mindy Moreland Date: Tue, 3 Feb 2026 17:08:18 -0800 Subject: [PATCH 2/3] edits and add capabilities page update --- baton/atlassian.mdx | 7 ++----- baton/capabilities.mdx | 2 +- 2 files changed, 3 insertions(+), 6 deletions(-) diff --git a/baton/atlassian.mdx b/baton/atlassian.mdx index f9454dc..b8b9247 100644 --- a/baton/atlassian.mdx +++ b/baton/atlassian.mdx @@ -52,7 +52,7 @@ A user with the **Org admin** role in Atlassian must perform this task. -### Gather SCIM credentials for account provisioning (Optional) +### Optional: Gather SCIM credentials for account provisioning If you plan to use account provisioning to create new users, you'll need SCIM API credentials. @@ -161,10 +161,7 @@ If you want to provision workspace roles with the connector, you must raise an A Paste the organization ID into into the **Organization ID** field. - (Optional) If using account provisioning, paste the SCIM token into the **SCIM Token** field. - - - (Optional) If using account provisioning, paste the SCIM base URL into the **SCIM Base URL** field. + **Optional.** If using account provisioning, paste the SCIM token and SCIM base URL into the relevant fields. Click **Save**. diff --git a/baton/capabilities.mdx b/baton/capabilities.mdx index ebb3a6e..73cfa25 100644 --- a/baton/capabilities.mdx +++ b/baton/capabilities.mdx @@ -34,7 +34,7 @@ og:description: "A quick reference for how each connector can be set up and what | [ArgoCD](/baton/argo-cd) | | | | | [Artifactory](/baton/artifactory) | | | | | [Asana](/baton/asana) | | | | -| [Atlassian](/baton/atlassian) | | | | +| [Atlassian](/baton/atlassian) | | | | | [Auth0](/baton/auth0) | | | | | [Avalara](/baton/avalara) | | | | | [AWS v1](/baton/v1/aws) | | | | From 4ac31df807d213984bd6e15c50185fee985f5fc5 Mon Sep 17 00:00:00 2001 From: Alejandro Bernal Date: Wed, 4 Feb 2026 15:57:52 -0500 Subject: [PATCH 3/3] fix comment --- baton/atlassian.mdx | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/baton/atlassian.mdx b/baton/atlassian.mdx index 8948b7f..bee8ff4 100644 --- a/baton/atlassian.mdx +++ b/baton/atlassian.mdx @@ -16,7 +16,7 @@ sidebarTitle: "Atlassian" This connector can provision roles in Atlassian workspaces. Depending on your Atlassian implementation, not all roles may be available for all workspaces, and some roles can be only configured if the user meets certain requirements. The Atlassian connector is unable to predict whether a role will be available to a user before the role is requested, but the connector will show an error if a requested role cannot be provisioned. -The Atlassian connector supports [automatic account provisioning](/product/admin/account-provisioning) via SCIM API. New users are created without passwords and receive invitation emails to activate their accounts. +The Atlassian connector supports [automatic account provisioning](/product/admin/account-provisioning) via SCIM API. New users are created in the directory without passwords. If a managed Atlassian account already exists for the specified email address, the user will be linked to that existing account. ## Gather Atlassian credentials