SAML SSO from JIRA Cloud to our Office 365 tenant for Sharepoint Links/Access

Nate Braun - NetDirector

We would like to host documentation on our MS365 tenant's SharePoint for our JIRA service desk users. We want to be able to have links on our Customer Portal that go to a SharePoint site that serves documents, spreadsheets, pdf, etc.

We don't want to open it to the public, and we don't want to create secondary logins in MS365 for each JIRA user account.

I have seen many articles about federating SSO from MS365 to JIRA but I want to go the other way and federate from JIRA to SharePoint Online.

Has any one tried this yet? 

Any advice would be appreciated. Thank you!

Ed Letifov _TechTime - New Zealand_

Hello, @Nate Braun - NetDirector 

Based on the fact that you are not opening anything to the public i.e. your Customer Portal and your Sharepoint site are for your internal users only – it seems you do not need to do anything special.

A simple link with no authentication details would lead a user from the Customer Portal to Sharepoint. If they are already, i.e. completely separately, logged in into your Office365/Sharepoint/EntraID in this browser – they will simply be shown your Sharepoint content. If they are not – they will have to login into MS365 at this point.

The reason why everyone is talking about SSO via MS365 is that if you did use your MS365 identities in Atlassian Cloud (this is not "federation", merely SAML SSO) they you'd be logging into Atlassian Cloud via your Identity Provider, or if you are already logged in at this point, simply going to any Atlassian product and be logged in. Then navigating a link to Sharepoint would also not result in yet another authentication request.

In this case rather than "creating secondary logins in MS365 for each Jira user account" you just change the email on the Jira user account to match that of MS365 and then integrate via Atlassian Guard both for SAML SSO and User Provisioning.