As part of improving security and aligning with CTU’s identity management, changes are currently underway in the login process for Atlassian cloud services (e.g. Jira, Confluence).
Atlassian Cloud uses a different approach to identity management than what is commonly used in our university environment, which is why we are implementing changes that will simplify account administration and reduce the risk of duplicate access.
What’s changing?
- For all users with accounts under CTU domains (*.cvut.cz), the email address used for logging into Atlassian Cloud has changed (or will soon change).
- From now on, users will log in using their university login in the form of
username@cvut.cz(e.g.novakj@cvut.cz), regardless of any faculty or other aliases. - This change is necessary to ensure identity consistency – in the past, changing an email address could result in the creation of a duplicate account in Atlassian, which led to issues with accessing services and data.
- The new approach ensures that each identity remains stable, unique, and fully aligned with the university identity system.
What does this mean for users?
- Logging in using the “Sign in with Microsoft” button is no longer supported.
- Instead, you must enter your university login (
username@cvut.cz) into the email field, after which you will be redirected to the standard CTU Microsoft SSO login page.
Note: Even though both login methods – entering the email manually and clicking the “Sign in with Microsoft” button – authenticate using the university identity, they technically follow different paths and behave differently in Atlassian Cloud:
-
-
Entering email in the form field (
username@cvut.cz):
This method is fully controlled by CTU and ensures the user is redirected to CTU’s central Microsoft login page. It correctly links the account to the university identity and prevents duplicate creation. -
Using the “Sign in with Microsoft” button:
This option is predefined by Atlassian and cannot be customized for CTU. While the login technically goes through Microsoft, accounts created this way may be incorrectly assigned and can lead to duplicate identities.
-
- Therefore, only use the method where you enter your email (
username@cvut.cz) manually, not the predefined Microsoft button.
Important: Possible Atlassian system notifications
- Due to this change, users may receive automatic notifications from Atlassian indicating that:
-
Their email address has changed, or
-
Their account is about to be removed.
-
- To minimize unnecessary notifications, accounts scheduled for removal are temporarily renamed using a
to-delete_prefix in their email address. - This ensures that no unnecessary messages are sent to actual university inboxes.
Change in delivery of standard notifications
- As a result of these changes, the delivery of standard operational notifications from Atlassian Cloud (e.g. task assignments, comment mentions, etc.) will also be affected.
- Notification emails will now only be sent to addresses matching the university login (
username@cvut.cz). - This means that notifications will only reach users who actively use their university email inbox hosted in Microsoft Exchange Online.
- This change could not be avoided, as it is a result of Atlassian Cloud’s identity management architecture.
Managing and using accounts across different instances
- There are multiple Atlassian Cloud instances operated by various CTU units (e.g. individual faculties or departments).
- Accounts configured using the standardized
username@cvut.czformat can be used across all these instances – if added by the instance administrator. - All centralized identity management in Atlassian Cloud will be handled via the main instance operated by CTU’s Computing and Information Center (VIC).
- This means that even though services may be run by various CTU departments, your identity will be managed centrally and consistently from the main organization.
What happens to existing accounts?
- If duplicate accounts were previously created (e.g. using a faculty-specific email address) and are linked to active services, we will handle these cases individually in cooperation with the relevant units or users.
- Duplicate accounts that are not linked to any active service will be gradually removed.
Thank you for your understanding and cooperation.
If you have any questions or experience issues with logging in, please contact your faculty’s technical support or the CTU Computing and Information Center.