nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

Customer Login to Jira Cloud using Adfs

Anandaraj M

Hi,

I am using jira cloud. how to configure ADFS, Once ADFS is configured does it impact the existing customers?

In another word does ADFS would overwrite the existing customer ID or it will create second (duplicate) ID for the customer.

Please suggest

Thanks

Anandaraj.M

Accepted answers

All comments

Andy Heinzer

Hi,

I understand that you have Jira Cloud and want to learn more about using AD FS with it. Atlassian has recently published a guide that will be helpful here. Please see, Configure SAML single sign-on with Active Directory Federation Services (AD FS).

In order to use AD FS with Atlassian Cloud, you will need to subscribe your Cloud site to Atlassian Access.

As for what this does to your existing accounts, there are related documents that explain this as well, check out Atlassian Access - User provisioning - Supported user account operations.

Supported user account operations

When you perform these user management operations from your identity provider, your updates will sync with your Atlassian Cloud organization.

We only sync user accounts from your identity provider to your Atlassian organization when they have email addresses from verified domains. We won't create, link, or update user accounts in Atlassian Cloud with email addresses outside of your verified domains (e.g. gmail.com or yahoo.com).

So for Atlassian Cloud, the email addresses your users currently have in that site and the email addresses found in AD FS will determine if new accounts are created or just existing accounts are updated. If there are uniquely different email addresses between the two locations, then I'd expect new accounts to be added. Otherwise, I'd expect there to only be a single account for that account.

I hope this helps.

Andy

Dario B

Hi @Anandaraj M ,

In order to summarize what written by my colleague @Andy Heinzer and add some more details:

The documentation page explaining how to configure ADFS is: Configure SAML single sign-on with Active Directory Federation Services (AD FS).
By configuring SAML SSO only, you only tell Jira that some users having a determined email address domain will be able to log-in using SSO. You do not touch the users in Jira at all unless you use/configure User Provisioning.
For details on this please see:

I hope this explains.

Cheers,
Dario

Anandaraj M

Hi Andy / Dario,

Thank you for your guidance and suggestion.

Anand.

Anandaraj M

Hi Andy,

Thanks for the clarification.

We need to complete the AD FS to make it as a single sign-on, however this process will take time minimum 2 months from our end. Hence, we are planning to do this customer creation in 2 Phases.

Phase-1 – We wanted to upload the customer details in the Jira Cloud manually and set individual passwords so that we can start using the Jira Cloud for Service Desk ticketing. Approximately, the customer email ID will be 2500.

Phase-2 – Once the AD FS is ready, we will plan to Sync the customer details in Jira Cloud so that AD password can be used so that we can make it as a single sign-on.

In this regards, ID created in Jira during Phase-1 will be the similar IDs which will be Sync in Phase-2. As per your input, we understand that we will be not have any issues during Phase-2 implementation and users can access the Jira Cloud with their existing IDs using FSS Active Directory password.

“So for Atlassian Cloud, the email addresses your users currently have in that site and the email addresses found in AD FS will determine if new accounts are created or just existing accounts are updated. If there are uniquely different email addresses between the two locations, then I'd expect new accounts to be added. Otherwise, I'd expect there to only be a single account for that account.”

Anand.

Welcome!

It looks like you're new here. Sign in or register to get started.

Quick Links

Find more posts tagged with

jira

cloud

jira-cloud

identity-manager