Regarding - Windows Integrated Authentication for Crowd-enabled Applications

[Sayeed Alam]

What does mean by Crowd-enabled application? Please explain. We have JIRA (V 4.3.4) with plug-in crowd-rest-application-management. So do we need to install and configure any other Crowd application to implement Windows Integrated Authentication.

[Colin Goudie]

Sayeed, you can check out our Kerberos connector https://www.appfusions.com/display/DIST/Confluence+or+JIRA+Kerberos+SSO+Authenticator+for+AD

[Bruno Vincent]

Hi,

This is an old thread, however you might be interested in the Integrated Windows Authentication for Apps using Crowd (IWAAC) plugin, that is available at https://marketplace.atlassian.com/plugins/com.cleito.iwaac

IWAAC uses Kerberos to allow your Windows domain users to log into Jira, Confluence, Bamboo, Bitbucket Server, FishEye, Crucible or any other web app using Crowd as its user management system, without entering a password.

Please check out https://www.cleito.com/products/iwaac/ for more details.

Best regards,

Bruno

[Sayeed Alam]

That means, we need to follow below steps. Please verify and comments.

1. Install JIRA 4.3

2. Install Crowd 2.2 and configure with AD.

3. Connect JIRA with Crowd.

4. Now when user wants to access JIRA, user will go to Internet Explorer and execute the JIRA URL.

5. Here JIRA will display the login form to ask user id and password.

6. User id and password will be verified via Crowd with AD and login into JIRA.

Here, we don’t want step 5. We don’t want to provide user id and password by user. We want to collect user id from our Domain LAN. Please suggest to achive this.

Regards,

Sayeed

[Edwin Chan]

No. Crowd-enabled application is simply an application that can authenticate through Crowd. You can configure the method of authentication (ex. Active Directory) in Crowd. Think of Crowd as an authentication proxy. When a user logs into JIRA, JIRA will ask Crowd if the login credentials are correct. Then Crowd will pass the credentials to the Active Directory. The Active Directory will say whether it's correct or not and pass it back to Crowd, then Crowd will pass it back to JIRA.

This is just a simple scenario, there are many ways to configure and use Crowd. Look at the documentation for more details.