Summary

Jira Align is designed to authenticate a user based on a single email or an external ID.

This article provides the solution on how to manage Guest accounts in Azure SSO in cases where userPrincipalName is different than their email ID.

Please refer to Microsoft Azure documentation for more information on the suggested settings

Solution

The Azure Entra configuration can be setup to conditionally send 'user.mail' for External guests and 'user.userprincipalname' for Members in the Unique User Identifier (Name ID) field.

Note: For Members, Microsoft does not recommend using 'user.mail' since email addresses are not always verified by Microsoft Entra ID. It is probably not a viable workaround for internal users.