Has anyone integrated a Single Sign on between Jira Service Desk and their users for another system?

Question

HI alll,

We are trying to configure a single sign on process with users from our platform into jira service desk. Has anyone accomplished this? We are using KeyCloack identity manager authentication on our platform. Please let me know if anyone has ideas on how to do this, thanks!

Jennifer Volpe_0r9rs6 · Answer

thank you for your comment! We are using Jira cloud...im assuming your service will not work with that?

Shradha Kamble · Answer

Hi @Jennifer Volpe

Yes, you can integrate Jira Service Desk Server as well as Data Center with Keycloak as Identity Provider using miniOrange Jira SAML Single Sign On (SSO) plugin.
We are one of the top Atlassian vendors and have good customer experience using our plugin with Keycloak provider.

You can take help of this guide to set it up: https://plugins.miniorange.com/saml-single-sign-sso-jira-using-jboss-keyclock

You can reach out to me at atlassiansupport@miniorange.com for assistance with the setup. We provide end to end configurations free of charge.

Full disclosure: I work for miniOrange top Atlassian vendor.

Thanks,
Shradha
miniOrange

Christian Reichert (resolution) · Answer

Hi @Jennifer Volpe

like Jon already said, you'll have to use a 3rd Party App to do that. There are quite a few in the marketplace: https://marketplace.atlassian.com/search?product=jira-service-desk&query=saml

Our App is the most installed on and we have quite a few customers with Keycloak. You use SAML with our App for SSO.

This Guide gives you an idea how to do the setup on both sides: https://wiki.resolution.de/doc/saml-sso/latest/all/setup-guides-for-saml-sso/keycloak/keycloak-with-manual-provisioning

However in the next release, our APP also implements the Keycloak API to synchronise Users & Groups from Keycloak into Jira/JSD. A feature we call User Sync for Keycloak. It's available in beta already, let us know if you like access to it already.

All other Plugins do support at a maximum "just in time" provisioning, which means the User is created during login. This has the downside that the user can never be deactivated in this method and is not available (to be added as a participant for example) before he logged in the first time. Our plugin certainly supports this as well, but usually true synchronisation is the better option.

To get in touch you have varies options:

* You can book a free screenshare/demo session with us here
* Or open a Support case

Last but not least here is the link to our plugin on the marketplace.

Cheers,
    Christian

P.S. I work for resolution, a marketplace vendor