nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

JIRA Service Desk SSO (oAuth)

Jesse Reitsma

Hello,

We're looking for a way to login to JIRA Service Desk from our own custom customerpanel.
So when our customer logs in to our custom customerpanel, they will see a link to Service Desk.
Once they click that link, they should be redirected to Service Desk and be logged in.

The userbase for the customerpanel is our own, not JIRA's.
Are there any ways to accomplisch this? For example with oAuth 2.0?

I hope you guys can help me out.

Edit: We're using JIRA Server (hosted)

Regards,
Jesse

Accepted answers

All comments

Bruno Vincent

Hello Jesse,

You can actually implement SSO between your custompanel and Jira with Atlassian Seraph (aka the authentication framework on which Jira is based).

You will need to edit seraph-config.xml so as to tell Jira to redirect unauthenticated users to the customerpanel authentication form and write your own custom authenticator to provide them with Single Sign-On.

Jesse Reitsma

Thank you for your answer, Bruno.

I don't have any expierence with Java.
Do you know how much code is involved?
Is it only the piece of code on the following page:
https://docs.atlassian.com/atlassian-seraph/latest/sso.html ?

Thanks in advance,
Jesse

Jesse Reitsma

Can I do something like this with Crowd?

Lars Olav Velle

Hello Jesse!

Have a look at our Kerberos/SAML plugin.

With Kerberos, your internal users are automatically logged in. Customers and mobile devices can benefit from SSO with SAML.

There is no need for any modification of your JIRA/Service Desk installation other than installing the add-on!

https://marketplace.atlassian.com/plugins/no.kantega.kerberosauth.kerberosauth-plugin/server/overview

Reach out to us at SSO@kantega.no, and we are hppy to help!

Bruno Vincent

Hi Jesse,

Sorry for the delay in replying. Looks like I didn't get the notification.

Yes, that's pretty much it.

In Jira's case, you will need to extend JiraSeraphAuthenticator (which extends DefaultAuthenticator itself) as explained on this page: https://confluence.atlassian.com/kb/single-sign-on-integration-with-the-atlassian-stack-794495126.html

Bruno Vincent

Yes, Crowd could be an option but as far as I can read from your particular context it sounds like a a more complex option than customising Seraph. What is your custom userbase? (LDAP? Database?)

sarel botha

I've created an Authenticator that works using JWT. It automatically adds a user if the user does not exist already. It is pretty easy to get it going. You can get it here: https://github.com/sjbotha/jira-jwt-authenticator/

Guido Leenders

There is a long thread on this on https://jira.atlassian.com/browse/JSDCLOUD-630. Bottom line as of October 2020:

when less than 5000 users Access might work for Jira customers
Or create your own service desk user interface
switch to Freshdesk or Zendesk

Welcome!

It looks like you're new here. Sign in or register to get started.

Quick Links

Find more posts tagged with

jira

jira-service-desk