nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

How to integrate Jira with my company's SSO

unknown

In my company, we have a SSO system for web applications.

Now I want to integrate Jira with this system and I have some questions:

1. How can I configure or do some development to make Jira redirect login request to the SSO system?

2. After user login, the SSO system will redirect to Jira with user info. How can I make Jira log user in with these info?

I searched some article saying 'serpha' could help? I am not sure.

Please help to give solution to this problem.

Thanks & Regards,

Yaoyu

Accepted answers

Wojciech Seliga

Hi,

Close. "Seraph", not serpha

This is an Atlassian library which JIRA (and other Atlassian products) use to authenticate users - http://docs.atlassian.com/atlassian-seraph/latest/

You may take a look at this documentation on how to write custom seraph authenticator: http://docs.atlassian.com/atlassian-seraph/latest/sso.html

There a nice page describing how this works in ... Confluence (but it should be similar in JIRA too): https://developer.atlassian.com/display/CONFDEV/HTTP+authentication+with+Seraph

I recommend taking a look at the source code of the current implementations used by JIRA: com.atlassian.jira.security.login.SSOSeraphAuthenticator and com.atlassian.crowd.integration.seraph.v25.CrowdAuthenticator

You should also take a look at http://confluence.atlassian.com/display/DEV/Single+Sign-on+Integration+with+JIRA+and+Confluence

answers.atlassian.com has a dedicated label for serpah-related questions - https://answers.atlassian.com/tags/seraph/ - but there are not yet many entries there.

All comments

Wojciech Seliga

Hi,

Close. "Seraph", not serpha

This is an Atlassian library which JIRA (and other Atlassian products) use to authenticate users - http://docs.atlassian.com/atlassian-seraph/latest/

You may take a look at this documentation on how to write custom seraph authenticator: http://docs.atlassian.com/atlassian-seraph/latest/sso.html

There a nice page describing how this works in ... Confluence (but it should be similar in JIRA too): https://developer.atlassian.com/display/CONFDEV/HTTP+authentication+with+Seraph

You should also take a look at http://confluence.atlassian.com/display/DEV/Single+Sign-on+Integration+with+JIRA+and+Confluence

answers.atlassian.com has a dedicated label for serpah-related questions - https://answers.atlassian.com/tags/seraph/ - but there are not yet many entries there.

unknown

Hi Seliga,

Very helpful information.

Thanks very much

Yaoyu

Wojciech Seliga

I've added seraph tag to your question.

unknown

Hi Seliga,

Now Jira is integrated with my company's SSO. thanks very much for your information.

Now I encounter a new problem. System can log user in system and work, but from Administration page, all users login details are not recorded.

Could you please help to advise how can I record the user login detail using API?

Thanks in advance.

Regards,

Yaoyu

Wojciech Seliga

Hey,

Login attempts are recorded through com.atlassian.jira.security.login.LoginManager (e.g. onLoginAttempt() method) which uses com.atlassian.jira.security.login.LoginStore. LoginManager is used by com.atlassian.jira.security.login.JiraElevatedSecurityGuard which is configured normally in seraph-config.xml.

Although I've not worked on this piece of code, I think you could call LoginManager or LoginStore methods from your filter directly or use similar elevatedsecurityguard as the one used by default.

I hope it helps.

Cheers,

Wojtek

dang

Indeed it seems that the "latest" info at http://docs.atlassian.com/atlassian-seraph/latest/sso.html is completely out of date.

Does any body have a link to build instructions for a custom Seraph authenticator? I have some basic code that I want to test, but can't get past the Maven unresolved deps problem:

[ERROR] Failed to execute goal on project dmajsso: Could not resolve dependencies for project uk.co.dma:dmajsso:jar:0.2-SNAPSHOT: The following artifacts could not be resolved: opensymphony:webwork:jar:1.4-atlassian-22, webwork:pell-multipart-request:jar:1.31.0, osworkflow:osworkflow:jar:2.8.1, opensymphony:propertyset:jar:1.5 .....

(and more lines)

Example pom.xml for a custom Seraph authenticator would be great ....

Tobias Sarnow2

Hi dan,
After a while I figured it out by mayself. Please see Stack Overflowhttp://stackoverflow.com/questions/16273566/jira-5-2-seraph-sso-login-behind-reverse-proxy

Hope that it will help you.

Cheers, Tobias

Tobias Sarnow2

Hi dan,
After a while I figured it out by mayself. Please see Stack Overflow http://stackoverflow.com/questions/16273566/jira-5-2-seraph-sso-login-behind-reverse-proxy

Hope that it will help you.

Cheers, Tobias

Anirudha Karwa

Hello All,

I also want to integrate JIRA with company's SSO. I am using Jira version 4.4.4. I have a couple of questions.

1. Does the seraph support Jira 4.4.4v?

2. Searph by default is in Java. Is it available in ASP.net/C#? We are not working on Java.

Any help is appreciated.

Thanks in advance.

Welcome!

It looks like you're new here. Sign in or register to get started.

Quick Links

Find more posts tagged with

jira

seraph