What information must be exchanged between the identity provider and Atlassian Cloud to configure SAML SSO?

The IdP's SSO URL and certificate, and Atlassian's ACS URL and entity ID

The IdP's IP address and Atlassian's network firewall rules

The IdP's database credentials and Atlassian's API keys

The IdP's user list and Atlassian's product license keys

Where in the admin console does an organization administrator enable Atlassian Access?

Billing > Subscriptions > Atlassian Access

Products > Jira Software > Security

Users > User Management > Access

A company is migrating from a legacy identity provider to a new one. They have Atlassian Access with SAML SSO configured with the old IdP. The admin wants to switch to the new IdP with minimal downtime. The new IdP is already configured with the same SAML attributes. What is the best approach?

Update the SAML certificate in Atlassian to the new IdP's certificate while keeping the old IdP's endpoint URL.

Disable Atlassian Access, reconfigure SAML with the new IdP, then re-enable Access.

Change the SAML SSO configuration in Atlassian to point to the new IdP, then test with a single user before switching the policy to 'Enforced'.

Keep the old IdP configuration and add the new IdP as a second identity provider in Atlassian.

An organization has Atlassian Access enabled with SAML SSO and SCIM provisioning. Users can log in successfully, but new users are not being provisioned. The admin checks the Atlassian Access logs and sees that SCIM requests are not arriving from the identity provider. What should the admin check first?

Verify that the SCIM provisioning is enabled and configured correctly in the identity provider.

Check if the SAML SSO policy is set to 'Enforced', which may block SCIM.

Verify that the users have verified email addresses in Atlassian.

Regenerate the SCIM bearer token in Atlassian.

AtlassianCloud Organization Admin

Domain 2Objective 1

Configure Atlassian Access ACP-520 Practice Questions (Page 5)

Part of the Atlassian Access and Authentication domain, which makes up ~44% of our current practice bank. Atlassian does not publish an official question count, but from its 90-minute exam (~35–60 total, ~15–26 in this domain), expect 5–9 from this objective — we provide 34 practice questions to prepare you well beyond it. (estimate)

34questions here

7free pages

10concepts

Questions 21–25

21foundation · easy
What information must be exchanged between the identity provider and Atlassian Cloud to configure SAML SSO?
Select an answer first
22foundation · easy
Where in the admin console does an organization administrator enable Atlassian Access?
Select an answer first
23expert · hard
A company is migrating from a legacy identity provider to a new one. They have Atlassian Access with SAML SSO configured with the old IdP. The admin wants to switch to the new IdP with minimal downtime. The new IdP is already configured with the same SAML attributes. What is the best approach?
Select an answer first
24expert · hard
An organization has Atlassian Access enabled with SAML SSO and SCIM provisioning. Users can log in successfully, but new users are not being provisioned. The admin checks the Atlassian Access logs and sees that SCIM requests are not arriving from the identity provider. What should the admin check first?
Select an answer first
25foundation · easy
Which of the following is a common external directory that can be synchronized with Atlassian Cloud?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to ACP-520

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Atlassian. “ACP-520” is a trademark of its owner, used for identification only.

Configure Atlassian Access ACP-520 Practice Questions (Page 5)

Questions 21–25

What information must be exchanged between the identity provider and Atlassian Cloud to configure SAML SSO?

Where in the admin console does an organization administrator enable Atlassian Access?

A company is migrating from a legacy identity provider to a new one. They have Atlassian Access with SAML SSO configured with the old IdP. The admin wants to switch to the new IdP with minimal downtime. The new IdP is already configured with the same SAML attributes. What is the best approach?

Which of the following is a common external directory that can be synchronized with Atlassian Cloud?

Keep studying — Atlassian Access and Authentication