ADFS propagation from internal network to the cloud

[Jason Bener]

We have installed a JIRA server on our network and we're using ADFS. We would like to use Confluence hosted on the Atlassian cloud. I realize that the cloud only supports google apps authentication and local cloud user accounts but is there a way to propagate AD user credentials from JIRA onto Confluence? 

[Daniel Eads _unmonitored account_ · Accepted solution]

Hi Jason,

A similar question has been asked before (doing a one-time import from JIRA to Confluence Cloud) - https://answers.atlassian.com/questions/19144506

This doesn't exactly fit what you're after. For starters, you would need to decrypt the passwords stored in your AD (see here: https://www.dsinternals.com/en/retrieving-active-directory-passwords-remotely/ ) to provide in a dump to Atlassian. After that, the passwords in Cloud wouldn't stay in sync with changes to your AD. Or new user accounts.

If you could do Google accounts, they have a sync feature with AD that would get you close to what you are looking for. It won't be complete SSO through your ADFS, but the users/passwords will stay synced. https://support.google.com/a/answer/106368?hl=en You can get Google Apps for free if you're not a for-profit company: https://support.google.com/a/topic/3035696 , otherwise it looks like $5/usr/month.

If none of those options work for you, there's always Confluence server which can use JIRA for authentication or integrates nicely with ADFS through several available SAML plugins. Confluence server administration is simpler than JIRA; the heaviest load is spending a couple hours doing upgrades once or twice a year.

Best of luck!