Fist Time setting up SSO for Jira Server

Question

Hello Community!

I'm working on a team that is assessing the feasibility of SSO for Jira Server (8.5) with Active Directory . I have been gathering documents regarding LDAP directories, SAML, SSO, and Crowd for Jira; but I was hoping to get some feedback from the community on tips, known challenges , best practices/approaches to the implementation.

Thanks for any insight!

Christian Reichert (resolution) · Answer

Hi!

On Server, your only option is a 3rd Party Plugin. You'll find most of them with a simple search on the marketplace like Ed suggests: https://marketplace.atlassian.com/search?query=sso

Our plugin is generally the most installed one, and the use case you describe is a pretty common one here you find the step-by-step guides for your setup: https://wiki.resolution.de/doc/saml-sso/latest/jira/setup-guides-for-saml-sso/microsoft-ad-fs

You also always get our help by scheduling a free screen share where we can help you with the setup. Just pick a slot via https://resolution.de/go/calendly

Cheers,
    Chris

Ed Letifov _TechTime - New Zealand_ · Answer

Please look at any of SSO apps available on Marketplace.

Our app is EasySSO for Jira – we offer 5 different authenticators NTLMv2, Kerberos, SAML, X.509 and HTTP Headers to give you and your Solution Architects more choice in the SSO space.

We do support SAML, we will work with or without LDAP directories, and with or without Crowd (you most definitely do not need Crowd to achieve SSO).

In particular, if you are running a Windows Domain, then with NTLMv2/Kerberos you can get a proper SSO between your Jira and your workstation – login once into your workstation, open the browser or click on a regular link (i.e. in the email) and you are "in" automaGically though the power of Integrated Windows Authentication, all using the industry-standard protocols supported by all major browsers, without any annoying SAML-related redirects.

Ours will work on intranet, VPN, mobile networks and even over internet (though why would anyone do that is a big question).

Most importantly our support is 24x7, the link is available on the Marketplace listing.