Disable username/password authentication on JSM Data Center

[Couraillon Theo]

Hello,

We use Google SSO authentication to access our JSM Data Center, and I would like to disable username/password authentication for all our users except one (our backup admin user).
Based on my tests, it seems to be binary: you can either disable this method for everyone or for no one. When I disable it, even the URL "https://jira.mydomain.com/login.jsp?nosso" redirects me to the Google login page.
I tried the procedure described here, but it seems to only block the API, it does not block password authentication on the interface.

Do you have any ideas? I am currently on Jira Service Management 11.2.1.

Thank you!

[Marc -Devoteam- · Accepted solution]

Hi @Couraillon Theo 

What I can remember on using the native SSO option in DC, there is no bypasing the SSO if enabled.

As @Florian Bonniec mentioned, only 3rd party solutions provide a nosso option.

Or it might be possible, see this KB article;

https://support.atlassian.com/jira/kb/bypass-saml-authentication-for-jira-data-center/

[Couraillon Theo]

Hi @Marc -Devoteam-,

Enabling enable-authentication-fallback and using this URL did the trick: https://[MY_URL]/login.jsp?auth_fallback

Thanks a lot for your answer and the link! :)

Théo.

[Florian Bonniec]

Hi @Couraillon Theo 

Hos is the SSO configured ? If you use an app like SAML Single Sign-On you have an url to bypass it. 

https://wiki.resolution.de/doc/saml-sso/latest/jira/further-configuration/disable-password-login-with-nosso-parameter

Regards

[Couraillon Theo]

Hi @Florian Bonniec,

I'm using the native plugin: com.atlassian.plugins.authentication.atlassian-authentication-plugin

That's the issue, 
> even the URL "https://jira.mydomain.com/login.jsp?nosso" redirects me to the Google login page.

:(

[Florian Bonniec]

In that case the url do not work as it's implemented by the 3rd party app.

The solution provided by Atlassian seems to be documented here 

https://support.atlassian.com/jira/kb/bypass-saml-authentication-for-jira-data-center/

Regards

[Couraillon Theo]

Yes! Thank you @Florian Bonniec!

That's the same link @Marc -Devoteam-  sent me earlier :)

Thanks to you two! 

Théo.