Custom cookie based SSO with jira service desk

Roland_xpxfe7

I want to see if the following is possible:

• Our CRM holds our user database. (nopCommerce) 
• A user is authenticated and a cookie is saved with an encrypted token
• The user clicks support and is redirected to jira service desk
• Via some plugin or sso jira checks this cookie then calls an api endpoint on our CRM to validate authentication
• User is logged in without creating a jira account 

We have already implemented the above with InvisionCommunity and it works well

Alternatively:

• Our CRM holds our user database. (nopCommerce) 
• A user is authenticated
• Our CRM calls a JIRA API and creates a new user (if they dont already exist)
• Our CRM authenticates the user and receives an api token key (or similar)
• The user clicks support and is redirected to jira service desk with the api token included as a parameter.
• User is logged in without them creating a jira account 

Are their existing plugins that would do this? If not is it possible to write such a plugin?

Any third parties who do this kind of work or is there documentation so we can do it ourselves? We have a decent budget to achieve the above.

Daniel Eads

Hi Roland,

For Atlassian Cloud products, there are just a few authentication options:

1. Creating Atlassian Accounts (used across all our Cloud products including Bitbucket and Trello) either in advance or by configuring your site to allow anyone with specific email domains to create accounts themselves
2. Integrating with G Suite / Google authentication
3. Using Atlassian Access to connect with a SAML-based identity provider such as Okta or Azure AD

I don't get the impression that Nopcommerce can function as an identity provider (unless you've extended it with a plugin that's not published on the internet). But the flow you described is more or less how a SAML assertion works at a high level. My suggestion would be trying to provide a SAML IdP for use with Atlassian Access.

Outside of that, it is possible for people to create Jira Service Desk requests without having an account in advance - they can enter their email address at the time they create a request. See this document for information on how to set this up and the user experience someone might expect with this setup. 

Cheers,
Daniel