ms.tgt_pltfrm: na

ms.devlang: na

ms.topic: tutorial

ms.author: jeedes

ms.collection: M365-identity-device-management

> [!NOTE]

> The Sign on URL value is not real. Paste the value from the instance which you use to signin to the Atlassian Cloud admin portal.

1. Your Atlassian Cloud application expects the SAML assertions in a specific format, which requires you to add custom attribute mappings to your SAML token attributes configuration. The following screenshot shows the list of default attributes, where as **nameidentifier** is mapped with **user.userprincipalname**. Atlassian Cloud application expects **nameidentifier** to be mapped with **user.mail**, so you need to edit the attribute mapping by clicking on **Edit** icon and change the attribute mapping.

5. In the left pane, select **Security** > **SAML single sign-on**. If you haven't already done so, subscribe to Atlassian Identity Manager.

6. In the **Add SAML configuration** window, do the following:

a. In the **Identity provider Entity ID** box, paste the **Azure AD Identifier** that you copied from the Azure portal.

7. To ensure that you have set up the correct URLs, update the Azure AD settings by doing the following:

a. In the SAML window, copy the **SP Identity ID** and then, in the Azure portal, under Atlassian Cloud **Basic SAML Configuration**, paste it in the **Identifier** box.

1. Select **New user** at the top of the screen.

1. In the **User** properties, follow these steps:

1. In the **Name** field, enter `B.Simon`.

1. Select the **Show password** check box, and then write down the value that's displayed in the **Password** box.

1. Click **Create**.

To enable Azure AD users to sign in to Atlassian Cloud, provision the user accounts manually in Atlassian Cloud by doing the following:

- [What is application access and single sign-on with Azure Active Directory?](https://docs.microsoft.com/azure/active-directory/active-directory-appssoaccess-whatis)