Okta Atlassian Single Sign-On Error: Authentication Policy Strategy Mismatch
Last Updated:
Overview
An Atlassian Single Sign-On (SSO) failure occurs in Okta due to a mismatch between authentication policy strategies. Resolve this error by enforcing SSO within the Atlassian authentication policy settings. When attempting to authenticate, the Atlassian SSO flow fails and displays an error message on the screen.
Hmm... we're having trouble logging you in. Please try again with a different authentication method.
The Atlassian URL displays an unauthorized error.
authentication-policy-strategy-mismatch
Example URL: https:///<domain>.atlassian.com/login/callback?error=unauthorized&error_description=authentication-policy-strategy-mismatch%%%%%%%%%%
Applies To
- Okta Identity Engine (OIE)
- Okta Classic Engine
- Single Sign-On (SSO)
- Security Assertion Markup Language (SAML)
- Atlassian
Cause
The error occurs because of an Atlassian authentication policy strategy mismatch where administrators configure but do not enforce SSO.
Solution
How is the Atlassian authentication policy strategy mismatch resolved?
Navigate to the Atlassian administration console, access the authentication policies, and edit the desired policy to enforce single sign-on.
- Navigate to
admin.atlassian.comand select the organization if there is more than one. - Select Security, and then choose Authentication policies.
- Select Edit for the policy that requires enforcement.
- Select Enforce single sign-on.
If the same error message appears after enforcing single sign-on in the policy, open a support case with Atlassian support to resolve the authentication policy strategy mismatch error. After resolving the issue, the user can sign in with SSO to Atlassian.
