Integrate Jira with our tenant's Office 365 AD (Azure).

Question

Hi! we will be implementing Jira SERVER, and would like to check a couple of technical things:

1) In theory Jira Serverl provides single-signon capabilities to integrate it with our tenant's Office 365 AD (Azure).

The question is, does this integration present the STS screen to gather credentials and enforce MFA?

2) If we use the mobile application (currently beta): https://confluence.atlassian.com/jirasoftwareserver/jira-software-mobile-app-966063511.html will it also present the STS screen of O365 so it authenticates the user with credentials and MFA?

Thank you very much team!

Federico.

Balu Thodupoonuri_rc6jux · Answer

At present Jira server license stopped still, this mini orange plugin can be purchased now for Jira server.  Please let us know.

Ankit_5decvz · Answer

Hi Federico,

I work for miniOrange, one of the top marketplace vendors providing SAML SSO solutions for Jira Server. We provide SAML SSO solution for all Atlassian server applications at most competitive prices.

You can get a free trial of our app here: Jira SAML Single Sign-On.

The app supports SSO with O365/Azure AD and is compatible with the mobile application. Here's a step by step guide to configure the app with Azure AD: SAML Single Sign-On (SSO) Into Jira Using Azure AD As IDP

You can redirect all the unauthenticated traffic to Azure AD by enabling Auto Redirect to IDP option in SSO Settings tab of the plugin as shown in the screenshot below:

You can also request a free one-time setup at atlassiansupport@miniorange.com where we will schedule a screen sharing session with you to assist you in end-to-end SSO setup.

Regards,

Ankit Ahuja,

miniOrange Security Software Pvt. Ltd.

Jon Espen Ingvaldsen Kantega SSO · Answer

Hi @Federico M.

I work for Kantega SSO, one of the marketplace vendors providing apps with SAML SSO support for Jira Server.

I can confirm that our SSO products are compliant with the mobile clients, and you can configure the solution to send users directly to Office365 / AzureAD when authentication is required. The following screenshot shows how this is configured in our redirection rules settings:

When MFA should be enforced, we allow you also to disable all traditional login screens in Jira. The following screenshot shows where and how to disable this:

The combination of always redirect to the identity provider at authentication and disabling of traditional username / password login should give you the solution you need on all devices. Please reach out to our support team if you need further help getting the setup right.

Regards,
Jon Espen
Kantega SSO