This article explains how to integrate Atlassian Directory with Personio. The integration updates managed Atlassian accounts with Personio attributes and deactivates Atlassian profiles if an employee is inactive in Personio.
Pre-requisites for a successful integration
Before beginning the integration process, ensure the following is in place:
- You have an admin role or editing rights for Marketplace Integration and API in Personio via Settings > People > Employee Roles > Access rights > Account configuration > Marketplace Integration and API.
- You have administrator access in Atlassian.
- You have enabled managed accounts in Atlassian.
Connect and authenticate Atlassian Directory Sync
Before you can begin the setup process in Personio, you must have a verified domain in Atlassian. This step enables managed accounts, which is necessary for the integration.
The setup process also requires an Atlassian Organization and API Key. Admins should change the API credential expiration to one year. Your integration stops working once the expiration date has passed.
Once you have completed these tasks in Atlassian, set up the integration directly in Personio's Marketplace with the Configuration Wizard.
Follow these steps:
- Go to Marketplace in Personio.
- Search for and select the Atlassian Directory Sync integration.
- Click Connect to open the Configuration Wizard.
- Enter your Organization Key and API Key (the token value generated in your Atlassian Admin Console).
- Click Next.
Configuration
The last step of the Configuration Wizard requires you to configure the setup for the integration. Follow these steps:
- Check the Update Atlassian accounts with Personio attributes box to enable attribute synchronization.
- Review all the attributes and ensure that each Atlassian attribute matches the corresponding Personio attribute.
- Optional: Click Add new attribute to include more attributes.
- Check the Disable Atlassian accounts for inactive employees to deactivate linked Atlassian accounts for inactive employees.
- Click Finish.
The integration setup is complete.
Atlassian Directory workflows
Once the integration is complete, Personio will try to match all active employees to Atlassian accounts. The integration will not match employees in onboarding, leave, or inactive status.
- Active Personio Employees: The integration updates configured fields when an Atlassian account's email matches an active Personio employee’s email.
- Inactive Personio Employees: The integration deactivates the corresponding Atlassian account when an Atlassian account's email matches an inactive Personio employee’s email.
- The integration ignores Atlassian users who don’t match a Personio email address.
The integration syncs with Atlassian every 30 minutes. It examines all managed Atlassian accounts that belong to your domain. It then updates Atlassian field values to match what’s in Personio. You can map any Personio attribute to Atlassian’s Department, Job title, Location, Name, and Username attributes.
User provisioning
This integration doesn’t automatically create Atlassian accounts. Employees must sign up for Atlassian using their company email address.
Make sure to enable Atlassian to claim accounts for your domain automatically. This turns them into managed accounts so the integration can update them.
User deprovisioning
You can tell Personio to disable an Atlassian account if an employee’s status is inactive. The next time the integration synchronizes, inactive employees in Personio will be disabled on Atlassian. Disabling an account doesn’t delete it from Atlassian. The account gets reactivated if there’s a disabled Atlassian account for an active Personio employee.