We have a trial of Jira in the cloud, and plan to use Active Dir for user mgt including authentication, however our AD is on-prem, do we need to open the firewall to the outside so that Jira can sync usernames and passwords with our AD Domain Controllers?

[Stephen JamesB]

Hi

For the purpose of authentication of our internal users into JIRA cloud using their Active Directory credentials what are the possible solutions?

All our infrastructure is On-prem.

Is the only solution to connect JIRA in the cloud through our firewall to our internal Active directory? Could we use the SSL option here?

From this page https://confluence.atlassian.com/adminjiraserver070/connecting-to-an-ldap-directory-749382818.html it says to configure the connection to an LDAP Directory in JIRA. The Server Settings require: Hostname to be configured, eg The host name of your directory server. Examples: ad.example.com, ldap.example.com, opends.example.com

Would the above solution therefore also require the above host name to be associated through public DNS with one of the organisation's external IPs, which the firewall would then associate on a particular Port with the Domain Controller internally?

What about a DC in the DMZ? Use of Azure? Use of a proxy JIRA server on prem?

Thanks

Regards

Stephen Jamesb

[Nic Brough -Adaptavist-]

Actually, none.  JIRA Cloud does not support external user directories (yet)