Currently, when registering client members, the PwC ID authentication process by the client member is not mandatory. Specifically, when a client domain email address is registered with PwC ID, an authentication email is sent to that address. However, even if the authentication is not completed, the member can still use JIRA.
This situation poses a security risk, so the PwC ID authentication procedure should be made mandatory.
Kasuki, Thank you for raising this concern. We’ve recently updated the client onboarding flow in PDM workspaces to address this. Client users must now complete PwC Identity registration before they are added to any integrations, including Jira. If registration is not complete, the user remains in a “Requested Registration” status and will not be granted access.
It’s also important to note the difference between individual and bulk onboarding:
When adding client users individually, you can select which integrations they should access.
When using bulk import, users are currently added to all integrations after registration. If more granular control is needed, we recommend using the individual add flow.
For full details on how registration and integration access work, please refer to the Client Access area of the Concourse Guide:
Please let us know if you’d like to discuss this further.
Thank you for the submission, Kasuki. There are efforts ongoing in this space to improve the Client management process. Our Product Manager will be in touch to provide more details on the functionality. In the meantime, can you let us know if you were adding individual client users or utilizing the bulk import feature?