Password manager

[Jasmine]

Hi,

I have a quick question regarding password management solutions for our service desk. We are currently exploring options and I wanted to ask which password managers integrate best with Jira Service Management.

I have already looked into Vault Password Manager and would be interested to know if there are any other recommended solutions we should consider.

We’re looking to determine whether Atlassian products, together with a Jira password-management app, can serve as a secure, centralized solution for managing our teams’ credentials for multiple systems we support, or if best practice is still to rely on a standalone, dedicated password manager.

Thank you for your help.

[Marc -Devoteam- · Accepted solution]

Hi @Jasmine 

How do you mean integrate?

Password managers are separate applications that can be used with applications or Saas products accessible via a browser.

They serve their own purpose, storing the URL of you cloud instance with username and password should provide you with the option to fill the information, when you access the main page of your JSM instance.

[Jasmine]

Hi Marc,

Thanks for the follow-up!

What I meant by integration is that we’re looking at whether Jira Service Management could act as the actual store for credentials, rather than forcing the service desk team to maintain passwords in a separate tool.

If there are apps or add-ons where Jira can securely house and manage passwords for the team, that’s the kind of integration I’m asking about.

Hope that makes sense, and thanks again!

[Marc -Devoteam-]

Hi @Jasmine 

As this is a SaaS solution I would stay far away from this.

information stored in Atlassian or even a 3rd party solution could be read by the developers of the application

Also I would be hesitant, as you loose access to Atlassian, you loos access th the stored information as you would first need access to Atlassian.

So if Atlassian has an issue or an outage, you can't access you pasword vault.

Always use a password management tool for this. As these application's have specific security and storage so no other then you can access information

[John Funk]

Hi Jasmine,

First, I would say pretty much all of the leading ones do a good job of it. If you are using one already, just go with that. 

Second, logins are not unique to the Atlassian products - meaning there isn't a different one for JSM or for Jira or Confluence, etc. You just have a login for your Atlassian account which is good across all sites/instances that you have access to. It is really Atlassian that you are logging into, not Jira or JSM. Just a clarification. 

[Jasmine]

Hi John, 

Yes, I am aware it is Atlassian we are logging into. 

We’re looking to determine whether Atlassian products, together with a Jira password-management app, can serve as a secure, centralized solution for managing our teams’ credentials for multiple systems we support, or if best practice is still to rely on a standalone, dedicated password manager.

Sorry for not being very clear and thank you for your help XD

[John Funk]

I would stay with the Standalone dedicated password manager or connect your Jira with something like Atlassian Guard and then connect to Okta or AD or whatever your IAM tool is.