How should I configure Crowd’s SSO domain so apps on different sub-domains authenticate correctly?

[Hedda Gabler]

I’m setting up Atlassian Crowd for SSO across multiple apps (Jira, Confluence, etc.). What’s the best way to set the Crowd SSO domain so that login works smoothly when apps are on different sub-domains? Any tips on cookie/domain settings would be helpful.

[Tomislav Tobijas]

Hi @Hedda Gabler ,

I guess in this particular case, you would configure the SSO domain to the parent domain that is common to all your subdomains. Something like ".example.com"

For the SSO cookie (and if you follow the principle above), it should also be set with the domain attribute as ".example.com"

Some additional tips/insights:

• Always use HTTPS (to ensure cookies are transmitted securely)
• For multi-domain SSO scenarios, you could rely on Crowd SSO 2.0

Pretty much everything (recommendations and such) should be stated within the official docs.

Now, I've only played around with Crowd, and I mainly configured IdP connections on cloud, so it's all more theoretical from my side when it comes to actual best practices from experience from my side 👀

Cheers,
Tobi