Netskope Global Technical Success (GTS)

Atlassian - Block Microsoft SSO for login

Netskope Cloud Version - 120

Objective

Atlassian - Block Microsoft SSO for login

Prerequisite

Netskope CASB Inline & SWG license is required

Context

Atlassian provides Single Sign-On (SSO) integration with Google, Microsoft, and Apple, Slack accounts. This knowledge base article focuses on preventing end-users from utilizing Microsoft SSO to access Atlassian.

Do You Know?

• When an end-user attempts to log in to Atlassian using Microsoft SSO, the traffic redirects to login.microsoftonline.com and login.live.com

1. For Microsoft Office 365 Account - login.microsoftonline.com
2. For Microsoft Personal Account - login.live.com

• Netskope recognizes these domains under a predefined cloud app called Microsoft Accounts and Microsoft Live Accounts.

Configuration

Step 1 - Create a Custom URL category 

Path: Netskope Tenant UI >>> Policies >>> Profile - - - URL Lists

Path: Netskope Tenant UI >>> Policies >>> Profile - - - Custom Categories

Step 2 - Create a Real-time protection policy

Path: Netskope Tenant UI >>> Policies >>> Real-time Protection >>> New Policy

Verification

Access Atlassian and attempt to log in using Microsoft’s Single Sign-On (SSO)

Note - User Notification format used above Link

Terms and Conditions

• All documented information undergoes testing and verification to ensure accuracy.
• In the future, it is possible that the application's functionality may be altered by the vendor. If any such changes are brought to our attention, we will promptly update the documentation to reflect them.

Notes

• This article is authored by Netskope Global Technical Success (GTS).
• For any further inquiries related to this article, please contact Netskope GTS by submitting a support case with 'Case Type – How To Questions'.