nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

Cross domain between confluence and JIRA

unknown

Hi,

I have my service desk with a proxy which change the domain name. Before we use this, customers can access to the knowledge base with Crowd and the SSO.

Now, they have to reconnect on confluence. When I look to the log, there is a problem of cross domain. I look to the logs and i see a cross domain problem.

How can we fix that ?

Thanks

Accepted answers

All comments

Bruno Vincent

Hi @[deleted]

My understanding is that after you added the reverse-proxy to the picture, the domain name of your applications do not match the Crowd SSO domain name that is configured in Crowd's console (as of today Crowd SSO actually relies upon a shared domain name, according to this feature request this should soon change in a future version of Crowd).

You need to add a rule at the reverse-proxy level in order to change the domain name of the cookies sent by your browser into the domain name that is expected by Crowd SSO.

For instance, in Apache you have to use the ProxyPassReverseCookieDomain directive:

ProxyPassReverseCookieDomain .rp.company.com .internalsso.company.net

unknown

Hi,

Thanks for your answer, I have a question : we have to add the ProxyPassReverseCookieDomain on the apache which run Crowd ?

Thanks again

Bruno Vincent

Hi @[deleted]

Can you share a bit more information about your environment please? What are the URLs of your applications? Where are they accessed from? (intranet/internet) Are they installed on the same server? What is the SSO domain name that you configured in Crowd's console?

The ProxyPassReverseCookieDomain directive will help you in the following situation:

You have internal applications with URLs like 'http://jira.internalsso.company.net', 'http://confluence.internalsso.company.net'
Crowd SSO is configured for '.internalsso.company.net'
Now, you want to access to those applications through a reverse-proxy that has another domain, with URLs like 'http://jira.rp.company.com', 'http://confluence.rp.company.com'

Do you actually have a similar situation?

unknown

Yes of course.

The url of my application on the internet (of course there are some alias but that explain my configuration):

https://www.mfse.fr for JIRA but we keep https://www.KIT.fr/jira internally
https://KIT.fr/confluence for Confluence
https://KIT.fr/crowd for Crowd

JIRA and Confluence shared the same server but there are a apache server for each.

We doesn't configure a domain in Crowd's console.

I'm not sure that I have the same problem. We want to have SSO from https://www.mfse.fr to https://KIT.fr/confluence if it possible.

Thanks,

Welcome!

It looks like you're new here. Sign in or register to get started.

Quick Links

Find more posts tagged with

confluence

server

jira-service-desk

jira-service-desk-server

crowd