nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

Disable username/password authentication on JSM Data Center

Couraillon Theo

Hello,

We use Google SSO authentication to access our JSM Data Center, and I would like to disable username/password authentication for all our users except one (our backup admin user).
Based on my tests, it seems to be binary: you can either disable this method for everyone or for no one. When I disable it, even the URL "https://jira.mydomain.com/login.jsp?nosso" redirects me to the Google login page.
I tried the procedure described here, but it seems to only block the API, it does not block password authentication on the interface.

Do you have any ideas? I am currently on Jira Service Management 11.2.1.

Thank you!

Accepted answers

Marc -Devoteam-

Hi @Couraillon Theo

What I can remember on using the native SSO option in DC, there is no bypasing the SSO if enabled.

As @Florian Bonniec mentioned, only 3rd party solutions provide a nosso option.

Or it might be possible, see this KB article;

https://support.atlassian.com/jira/kb/bypass-saml-authentication-for-jira-data-center/

All comments

Florian Bonniec

Hi @Couraillon Theo

Hos is the SSO configured ? If you use an app like SAML Single Sign-On you have an url to bypass it.

https://wiki.resolution.de/doc/saml-sso/latest/jira/further-configuration/disable-password-login-with-nosso-parameter

Regards

Couraillon Theo

Hi @Florian Bonniec,

I'm using the native plugin: com.atlassian.plugins.authentication.atlassian-authentication-plugin

That's the issue,
> even the URL "https://jira.mydomain.com/login.jsp?nosso" redirects me to the Google login page.

Marc -Devoteam-

Hi @Couraillon Theo

What I can remember on using the native SSO option in DC, there is no bypasing the SSO if enabled.

As @Florian Bonniec mentioned, only 3rd party solutions provide a nosso option.

Or it might be possible, see this KB article;

https://support.atlassian.com/jira/kb/bypass-saml-authentication-for-jira-data-center/

Florian Bonniec

In that case the url do not work as it's implemented by the 3rd party app.

The solution provided by Atlassian seems to be documented here

https://support.atlassian.com/jira/kb/bypass-saml-authentication-for-jira-data-center/

Regards

Couraillon Theo

Hi @Marc -Devoteam-,

Enabling enable-authentication-fallback and using this URL did the trick: https://[MY_URL]/login.jsp?auth_fallback

Thanks a lot for your answer and the link!

Théo.

Couraillon Theo

Yes! Thank you @Florian Bonniec!

That's the same link @Marc -Devoteam- sent me earlier

Thanks to you two!

Théo.

Welcome!

It looks like you're new here. Sign in or register to get started.

Quick Links

Find more posts tagged with

jira-service-management

jira-service-desk-data-center

jira-service-management-server

jira-service-management-data-center