How to set up SAML single sign-on for Trello Enterprise

Streamline logins with Atlassian access SSO

To ensure only authorized and licensed members access Enterprise Workspaces and boards, Trello Enterprise comes bundled with Atlassian’s SAML single sign-on tool known as Atlassian Access.

If you’re unfamiliar with SAML, it’s a type of authentication process that uses your preferred identity provider (IdP) to verify approved users. With SSO, users can access Trello faster (and easier) because they only have to remember a single set of login credentials instead of several. Plus, because the login ties to your company’s IdP, any changes made there flow through to Trello. So if an employee leaves your company and you deactivate them in your IdP, then their Trello login automatically deactivates.

To get started setting up Atlassian Access for your users, visit:

https://support.atlassian.com/security-and-access-policies/docs/understand-atlassian-access/

To share or not to share—that is the (security) question

Keeping your data secure is a team effort. While Trello works hard to keep your connections and Workspaces secure, it’s equally important that your users practice safe information-sharing practices.

Weaving Trello Enterprise into your existing security education program is a great way to ensure users receive clear guidelines and expectations on their use of Trello.

Here are some examples:

• Data sharing. Be clear about what information teams can and cannot share on their board. Examples include passwords, account information, and/or customer data.
• Private vs. public boards. If your company uses public boards, set expectations for who can create these boards and what purpose they serve.

Leveraging your security education program to discuss teams’ use of Trello goes a long way in ensuring that users maximize their workflows while minimizing security risks.

Cloud security alliance and compliance certifications

Trello belongs to the Cloud Security Alliance (CSA), an organization committed to security best practices for cloud-based tools and environments. Trello participates in CSA’s Security Trust Assurance and Risk (STAR) Program and belongs to the STAR registry.

Trello’s compliance program includes

• SOC2 and SOC3 certification;
• ISO/IEC 27001 certification;
• ISO/IEC 27018 certification;
• GDPR compliance;
• PCI DSS; and
• FedRAMP certification.

You can learn more about these certifications here.

Trust @ Trello

Your trust in Trello Enterprise matters. It’s why Trello has centralized all trust- and security-related reports and certifications in one place.

Quickly access security and compliance reports, or learn more about Trello’s terms of service and privacy policy. You can also access Trello’s status page with real-time updates on Trello’s availability and report bugs you may encounter in Trello.

Atlassian trust & security

Trello Enterprise belongs to the Atlassian family, which means it adheres to the same strict trust and security practices and requirements as Atlassian’s other tools.

If you’re interested in learning more about these practices and requirements, head over to the Atlassian Trust Center. It’s your go-to location for all security, reliability, privacy, and compliance information for Trello Enterprise (as well as Atlassian’s other products and services).