sso with confluence,crucible and fisheye

[mai mai]

software:atlassian-crowd-2.4.0.tar.gz, atlassian-confluence-4.2.11-x64.bin , crucible-2.10.1.zip(with fisheye)

operating system: linux redhat 4

jdk: jdk1.6 + database: mysql 5.5

Reference to the following links:

https://confluence.atlassian.com/display/CROWD024/Integrating+Crowd+with+Atlassian+Confluence

https://confluence.atlassian.com/display/CROWD024/Integrating+Crowd+with+Atlassian+Crucible

https://confluence.atlassian.com/display/CROWD024/Integrating+Crowd+with+Atlassian+FishEye

Use the Atlassian import users from confluence in crowd. So, users have the same username and password.

Users and groups can be synchronized. Try logging in to crowd, confluence and crucible is ok.

But single sign-on is failed.

[Tiago Comasseto · Accepted solution]

Hi there,

The SSO configuration sometimes is tricky, but there are some key points that I'd suggest you to check, they are the following:

1. Ensure that the URLs being used to access each application and the SSO Domain value stored in Crowd are valid and match the pattern;
2. Ensure that all applications are using the Crowd authenticator at their WEB-INF/classes/seraph-config.xml files;
3. Ensure that the Directories that are assigned to each application in Crowd, If more than one, are in the exact same order;
4. If there are proxy servers being used between Crowd and the applications, make sure to add their IP addresses to theTrusted Proxy Servers list in Crowd.

I hope this information has helped.

Cheers

[William Crighton [CCC]]

Question for Tiago Comasseto [Atlassian]:

I cannot find a seraph-config.xml file in my 2.10.4 Crucible install. The only 'SSO' option is under Administration/Authentication and it is a radio button option 'SSO Enabled true/false'. I'd attach a screenshot but I can't.

There is a seraph-config.xml under WEB-INF/classes on JIRA and Confluence, but I cannot find any file with the word 'seraph' in it on my Crucible install.

-wc

[Tiago Comasseto]

Hi Wiilliam,

You are right, in Fisheye/Crucible we don't have a seraph-config.xml file. The SSO configuration is set under UI. See details here.

I hope this helpes.

Cheers

[William Crighton [CCC]]

Thank you very much for the reply. Unfortunately the link you provided didn't help - it looked like it would, our crowd URL didn't have 'services/' in it, but adding that and restarting crucible didn't help. We can see our crowd groups and have to supply our crowd password to authenticate, but single sign on isn't working. Any ideas? Or should we just create a support request?

[Tiago Comasseto]

William, since it seems that we'll need to further investigate this case, I believe the best opition would be create a support request. This way we can analyse your logs and understand what's wrong.

Cheers

[William Crighton [CCC]]

beat on it a little more and realized we were being stupid and, well, enough said. The solution was to set our Crowd URL with /crowd/services/

Thanks for the fast replies, helped us out. Cheers!

-wc

[William Crighton [CCC]]

Question for Tiago Comasseto [Atlassian]:

I cannot find a seraph-config.xml file in my 2.10.4 Crucible install. The only 'SSO' option is under Administration/Authentication and it is a radio button option 'SSO Enabled true/false'. I'd attach a screenshot but I can't.

There is a seraph-config.xml under WEB-INF/classes on JIRA and Confluence, but I cannot find any file with the word 'seraph' in it on my Crucible install.

-wc

[William Zanchet [Atlassian]]

Hi, I would suggest to you, to check the Applications URLs

1. Ensure that the SSO Domain was defined

2. Ensure that the Applications URLs are in the SSO Domain and that the Domain pattern is being respected:

If using a .domain.com pattern (with the dot), sub-domains are allowed
Examples:

• http://jira.domain.com
• http://confluence.domain.com/external
• http://fisheye.domain.com/shared

If using a simple domain.com pattern, sub-domains are not allowed.
Examples:

• http://www.domain.com/jira
• http://www.domain.com/confluence/external
• http://www.domain.com/fisheye/shared
  

Cheers,

WZ