Calling Jira API with Oauth2 and token generated and managed by Azure Entra ID

[Matteo Vecchiato]

Hi community,

For integrations security policy I have a requirement to integrate Jira with strong authentication using an IDP token.

When an external tool call Jira rest API, it is required to pass a token that must be generated and managed by Azure ENTRA ID, using Oauth2.

Any suggestions on how to configure the platform for this purpose?

Thank you for any guidance 

Regards 

[Shawn Doyle - ReleaseTEAM]

Hi @Matteo Vecchiato 

It's possible....  While Jira Cloud doesn’t take Microsoft Entra ID (Azure AD) tokens when you talk to its REST API. Instead, it only works with special tokens made by Atlassian. So, if you want to use Entra for security, you can put Entra in front of your own app or service. Then, your service can talk to Jira using an Atlassian token.

I'm not my company's greatest auth contact, Let's see if @Jim Knepley - ReleaseTEAM can add to this, but I believe you would need to create some sort of  gateway app in forge or find an addon that already does this.

[Jim Knepley - ReleaseTEAM]

Hi @Matteo Vecchiato, @Shawn Doyle - ReleaseTEAM 

I assume you've already set up Atlassian Cloud to integrate with Entra ID for application login (via SAML).

What I think you're trying to do seems complicated, but it is a well-worn path. At the highest level, users use their usual credentials to get a temporary access token, which is then used to communicate with the API. It's more complicated than that under the hood, but that's the idea.

Without knowing more about the "external tool," it's hard to be more specific. These pages might be helpful:

https://developer.atlassian.com/cloud/jira/platform/oauth-2-3lo-apps/

https://support.atlassian.com/cloud-automation/docs/use-entra-id-with-automation/