Is SAML SSO with Microsoft Entra ID (Azure AD) supported for Jira Data Center without a SAML plugin?

[Vinod M]

Hi ,
Can we configure SAML SSO between Jira Data Center 11.3.7 and Microsoft Entra ID (Azure AD) without using any SAML/SSO plugin  SSO for Atlassian Data Center ?

[Viswanathan Ramachandran]

Yes, see https://confluence.atlassian.com/jirakb/how-to-configure-saml-authentication-with-microsoft-entra-id-on-jira-data-center-1082272116.html

[Vinod M]

Hi, 
Yes, I checked this documentation. However, the configuration uses the SSO for Atlassian Server and Data Center App. In our Jira Data Center instance, when I try to access Authentication Methods → Add configuration without this app, I get a “Forbidden” error.
Is there any way to configure SAML SSO with Microsoft Entra ID without the Atlassian SSO app, or is this app mandatory for SAML authentication in Jira Data Center?

[Viswanathan Ramachandran]

You get forbidden error when you click authentication methods? Are you system administrator?

If you also manage Microsoft, then you will go to Azure portal and create x509 certificate or you need to work with Azure admin and follow the steps in the KB.

So, to put simply, you will need to work with SAML/identity provider together and get this configured.

[Ed Letifov _TechTime - New Zealand_]

Hello, @Vinod M 

The proper answer: you need an app, however one of the apps is from Atlassian themselves and comes bundled in with Jira DC. So, you do need an app, but if you are happy with the basic functionality you don't need a 3rd party Atlassian Marketplace app (like our EasySSO or plenty of others)

You just need to figure out why you get Forbidden error.

Are you a Jira system-administrator?

It's also possible that a proxy for some reason is configured to deny access to that — in the past experience with our Service customers (we are also a Solution Partner) often when there would be a vulnerability discovered, admins might apply this as a mitigation, and then forget to remove.