nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

Connecting JIRA to Azure AD

Vilas Torgal

Hi, We are exploring an option of installing the JIRA on one of our Azure servers and then connecting it to our corporate Azure Active Directory.

Appreciate any help in how to implement connecting JIRA to azure AD and with some inputs/pointers on way forward.

are there any readily available plugins for this purpose?

Accepted answers

Jeevan Desarda_lpq0qh

Microsoft has just released the FREE SAML single sign on plugin for our mutual customers. You can download the plugin from Microsoft Download Center and then use Azure AD JIRA app to connect with it. You can see the complete documentation from here and then use single sign on for it.

Feel free to write back to us on our alias if you face any issues.

Thanks.

FREE Plugin : https://www.microsoft.com/en-us/download/details.aspx?id=56506

Documentation: https://docs.microsoft.com/en-us/azure/active-directory/active-directory-saas-jiramicrosoft-tutorial

All comments

Timothy

Did you try this? https://confluence.atlassian.com/display/JIRA/Connecting+to+an+LDAP+Directory

Vilas Torgal

Thanks for the reply Timothy. We tried using the details from the link you mentioned and they are good for connecting with LDAP directory on-premise. However, we could not connect to cloud based Azure AD services. Any help in this regards would be great.

Jorge Pires

Have you been able to get a reply on this so far?

Payal Baheti1

Is this feature available now ?? Can someone provide an update ?

unknown

I think this answers the question.

https://confluence.atlassian.com/jirakb/authentication-against-azure-active-directory-668467707.html

https://jira.atlassian.com/browse/CWD-3607

Jira Administrator_fr4rdj

It looks as though Microsoft is offering that connection now.

https://azure.microsoft.com/en-us/marketplace/partners/atlassian/atlassiancloud/

I haven't tried it yet and was browsing here in the group to see if anyone else has connected to it. I am curious if everyone connected via Azure has to be a paid user, or if some can be paid users and other customers.

Thanks

Russell Stanford

Bruno Vincent

Hello everyone,

I guess some of you will be interested in ODCC, a new plugin for Crowd: https://www.cleito.com/products/odcc/

(It is also available on Atlassian Marketplace at https://marketplace.atlassian.com/plugins/com.cleito.odcc/server/overview)

ODCC stands for Office 365 Directory Connector for Crowd. It allows you to add your Office 365 / Windows Azure Active Directory to Atlassian Crowd as if it were a standard LDAP directory.

You can see it in action here:

https://youtube.com/watch?v=SH8R_emN43U

(Disclaimer: I work for the vendor of this plugin)

Lars Olav Velle

You can use SAML. This works with both premium and basic version of AZURE:

https://marketplace.atlassian.com/search?query=kantega

Russell Stanford

Nice, but it doesn't work for the cloud version of Atlassian. For cloud version you will have to have a Google Suite account or what @Lars Olav Velle mentions below.

Bruno Vincent

@Russel Actually as far as I know (@Lars, please correct me if I'm wrong), Kantega's plugin is for server edition only so this won't work for Atlassian Cloud neither. But yes, SAML is the way to go for Atlassian Cloud and Atlassian has just launched a public beta for it: https://confluence.atlassian.com/confeval/other-atlassian-evaluator-resources/does-atlassian-cloud-support-saml

Lars Olav Velle

We only support server edition due to technical limitations. If you are using JIRA cloud, then I`d check out the link @Bruno is referring to.

Jeevan Desarda_lpq0qh

Feel free to write back to us on our alias if you face any issues.

Thanks.

FREE Plugin : https://www.microsoft.com/en-us/download/details.aspx?id=56506

Documentation: https://docs.microsoft.com/en-us/azure/active-directory/active-directory-saas-jiramicrosoft-tutorial

Jeevan Desarda_lpq0qh

Feel free to write back to us on our alias if you face any issues.

Thanks.

FREE Plugin : https://www.microsoft.com/en-us/download/details.aspx?id=56506

Documentation: https://docs.microsoft.com/en-us/azure/active-directory/active-directory-saas-jiramicrosoft-tutorial

Jeevan Desarda_lpq0qh

Feel free to write back to us on our alias if you face any issues.

Thanks.

FREE Plugin : https://www.microsoft.com/en-us/download/details.aspx?id=56506

Documentation: https://docs.microsoft.com/en-us/azure/active-directory/active-directory-saas-jiramicrosoft-tutorial

Jeevan Desarda_lpq0qh

Yes, we have ton of customers who are using Atlassian Cloud app to connect with JIRA on Cloud. This application on Azure AD app gallery is developed along with Atlassian team. So feel free to use it.

This app is also available for FREE Azure AD customers and you can use it for all the organization users.

john morrissey

@Jeevan Desarda or @anyone

do you know if the plugin available from MS will work with Jira installed on a *nix machine? I'm trying to upload it but it keeps failing. The MS doc states Jira has to be installed on a 64bit Windows OS but figured I'd ask if you had any experience

Andrew Best

Hi @john morrissey

The JIRA AAD plugin worked on Ubuntu LTS without any problems I could see.

I saw the same upload problem with the Confluence plugin MS offer for AAD. I found a work around by having the page download the plugin file from a web server instead of uploading from my local machine. Seemed to do the trick to get it installed. The confluence plugin broke more generally at this point and we couldnt complete its configuration in our tests.

I know that @Jeevan Desarda is working on some updates for the JIRA and confluence plugins at the moment to address version currency and some issues I opened with MS about them.

gmrizzo

I also installed the plugin on Ubuntu LTS without any problems. But there is a problem when using the plugin behind a reverse proxy.

Confluence and Jira are installed as specified in the documentation.

Jira/Confluence <- HTTP -> Apache Reverse Proxy <- HTTPS -> Client

The generated urls for the identifier, the reply url and the sign on url are only http but https is required.

I'm currently in contact with microsoft to find a solution on this.

Maybe someone has an idea.

This is just for your information.

Robin

Hi friend,

I connected the Azure AD through the microsoft addon and it works nice.
But I still have to create the user first to internal jira directory otherwise I get "User is not available". Is there a way to create all users automatically? Or do I have to setup a user directory?
How to configure the user directory sync for the azure ad?

Erick Grimmer_6lkc3n

I would like to know more about this as we are considering switching to Jira Service Desk. If we have to manually send an invite every time we have a new employee come on board before they can submit requests that is a deal breaker.

Russell Stanford

We use the Azure AD SAML method to add users. You have to add them to the Azure AD enterprise application. They then appear in the list of users, or portal only users. When they sign in with their office 365 credentails + 2FA (if any) their account is linked to Jira.

Christian Wiemer

Hi Russel,

we setted up a test-connection between azure ad and Jira with the article discribed above (https://docs.microsoft.com/de-de/azure/active-directory/saas-apps/jiramicrosoft-tutorial)

Unfortunately it doesn't paste the Azure Ad user to jira on it's own, we have to create it manualy in the jira user directory (also with password details, which is a no-go in corporate use).

If I understand you correct, your userdata from the Azure Ad is directly transfered to jira and then ready to use for all office365 users. Could you point out, how you made this happen.

Thx

Richa Pathak_thbck6

Hi @Jeevan Desarda

I have tried installing Microsoft plugin on Jira and I am facing the same issue, The generated urls for the identifier, the reply URL and the sign-on URL are the only HTTP but https is required.