Enabling SSO on JIRA hosted on Azure without disabling WebSudo

Question

Hello Team,

Has anyone configured SSO for JIRA hosted on an Azure server?

In order to do this we need to disable WebSudo, which we are not happy to do as our security team rejected the proposal.

Is there any plugin/addon available in market which provides this capability without compromising any security.

Regards,

Prashant

Prashantgouda KARAKANAGOUDR · Answer

Hi Lokesh,

Thanks for the inputs.

We will validate this internally and update.

Regards

Prashant

Lokesh Naktode_miniOrange · Answer

Hi Prashant,

In SAML SSO, IDP (in your case. I am assuming it is Azure AD) just sends the SAML Response and it is the responsibility of the SAML SSO plugin or SSO module on the Service Provider application (for eg. JIRA) to validate response and create a user session (end-user session and WebSudo session) and it seems like you are using Microsoft's JIRA SAML SSO plugin. It is a known issue with some of the versions of Microsoft's SAML SSO Plugin for JIRA that it is not able to create a WebSudo Session.   I suggest you should check for an update or submit a support request to Microsoft for faster troubleshooting.

You can also take a look at the SAML SSO plugins from miniOrange.  It has a lot of advanced security features and also allows SSO to end-users as well as the JIRA Admin console (WebSudo Session). You don't need to disable any of the core functionality of the JIRA Server to use this plugin.

Thanks,

Lokesh

PS: I work for miniOrange one of the top SSO vendors in the Atlassian Marketplace. Feel free to reach out to miniOrange Support in case of any questions or need assistance with the plugin configuration.