Can the user/pass fields be accessed directly from a separate URL once hidden from login screen?

Question

I've set up my Jira instance to allow users to sign in via OIDC SSO. I don't want them to see any alternatives means for logging in  so I've hidden (not disabled) the username and passwords fields from the login screen. As an admin, I want to still be able to access the username and password field with a "break-glass" local admin account in case of failure. Is there a direct URL I can still use to access for that scenario?

Chandler Roper · Answer

Thanks! Can this be set through the UI, a config file, helm chart, or is it only available through REST?

Piyush Annadate _ACE Pune_ · Answer

Hello @Chandler Roper ,
Welcome to Community !!

Since you've hidden the LOGIN process, one may login via Bypass URL "The URL to display the login page is: <BASE_URL>/login.jsp?auth_fallback but the admin needs to enable authentication fallback first. "
It reveals the username/password fields only for you (or whoever knows the link).

For the fallback is required to be flagged with FALSE or TRUE based on requirement.

IN previous version of JIRA DC, you can pass the credentials in the URL, with 8+ version, that was removed (As I can say).

Also, check out for configure the DC SSO to enforce SSO only for users in certain groups. Exclude break-glass account from that group.