Integration Guide: Atlassian Cloud

Overview

The Atlassian Cloud integration connects Tello IAM to your Atlassian organization, allowing Tello to monitor and manage user access across Atlassian products such as Jira and Confluence. The connection requires four values: your Organization ID, an Admin API Key, a SCIM URL, and a SCIM Bearer Token.

Before connecting

The Administrator completing this setup must have Org Admin access in Atlassian Admin. You will need to complete two steps in Atlassian before configuring the integration in Tello IAM: creating an Admin API Key and setting up a User Provisioning directory to obtain the SCIM URL and Bearer Token.

API key expiration: Atlassian API keys expire after a maximum of one year. Schedule a recurring task to regenerate the key and update the integration in Tello IAM before it expires to avoid an authorization failure.

Step 1: Locate your Organization ID

Your Atlassian Organization ID is found in the Atlassian Admin URL after signing in at admin.atlassian.com. It appears in the URL in the format: admin.atlassian.com/o/<organization-id>/...

Copy this value — you will need it when configuring the integration in Tello IAM.

Step 2: Create an Admin API Key

1. Navigate to admin.atlassian.com/o/<your-org-id>/api-keys or go to Atlassian Admin and select Settings → API keys.
2. Select Create API key.
3. When prompted, select API key without scopes.
4. Enter a name for the key (for example, Tello IAM) and set an expiration date. Keys can last no longer than one year.
5. Select Next, review the key details, and select Create API key.
6. On the confirmation page, copy both the Organization ID and the API key. The API key is only displayed once and cannot be recovered after this step.

Important: Copy the API key before closing this page. It will not be shown again. If lost, a new key must be created.

Step 3: Set up User Provisioning and obtain SCIM credentials

Tello IAM also requires a SCIM URL and SCIM Bearer Token from Atlassian. These are generated when you add an identity provider directory under User Provisioning in Atlassian Admin.

1. In Atlassian Admin, navigate to Directory → User provisioning.
2. Select Add identity provider directory.
3. Set Identity provider to Other provider and enter a directory name (for example, Tello IAM). Select Add.
4. Atlassian generates a SCIM URL and Bearer Token. Copy both values immediately — the Bearer Token is only shown once.

Step 4: Connect Atlassian Cloud in Tello IAM

1. Navigate to Integrations in the left navigation.
2. Select + Add Integration.
3. Search for Atlassian Cloud and select Add.
4. Enter your Organization ID.
5. Enter the SCIM URL from Atlassian Directory → User provisioning.
6. Enter the Admin API Key generated in Step 2.
7. Enter the SCIM Bearer Token from Atlassian Directory → User provisioning.
8. Select Test Connection to verify all values are valid. A Connection successful confirmation will appear if accepted.
9. Select Connect. The integration appears on the Integrations page and an initial sync begins automatically.

Verify the connection

After the initial sync completes, confirm the following on the Integrations page:

• The Atlassian Cloud integration displays a status of Active
• A sync timestamp is present and reflects the completed sync
• User records on the Users page display detected Atlassian permissions in the Access column

Reauthorizing the connection

If the integration loses authorization — most commonly due to an expired API key — it will display an error on the Integrations page. Generate a new API key in Atlassian Admin, then select the integration row in Tello IAM, select Configure, and enter the new key.

Related articles

• Configuring Integrations — manage sync schedules, drift detection, and integration settings
• Understanding Errors — resolve integration errors and authorization failures