Trying to integrate Confluence server and Azure AD but its failing

Installed Confluence server in Azure via Marketplace template.

Now, we are trying to integrate Confluence server and Azure AD using this article but not able to do it successfully:

http://www.identityandcloud.com/2017/08/sso-azure-ad-confluence/

 

While trying to run "Atlas-run" results in error:

[WARNING] Some problems were encountered while building the effective model for com.bitium.saml:SAML2Commons:jar:1.1.2

[WARNING] 'build.plugins.plugin.version' for org.apache.maven.plugins:maven-source-plugin is missing. @ line 132, column 21

Failed to execute goal com.atlassian.maven.plugins:maven-amps-dispatcher-plugin:6.3.13:run (default-cli) on project SAML2Commons: Couldn't detect an AMPS product to dispatch to -> [Help 1]

 

1 answer

Hi @ankit singhal,

sorry I can't help you with the bitium free plugin.

There are however other plugins available in the Marketplace (ranging from free to paid-for), if you want to try a different one.

A good overview: https://marketplace.atlassian.com/search?query=saml

Also some of the commercial plugins, like ours, are listed on the Azure Marketplace with a Tutorial - that has the advantage that you would not need the Azure AD Premium licenses to use it. As it's no longer a custom SAML app but a pre-defined & listed one (which also works in the free tier of Azure AD).

Hope this provides you with an alternative in case you don't get the above solved.

Cheers,
   Christian

Full disclosure: I work for a Marketplace Vendor - https://marketplace.atlassian.com/vendors/1210947/resolution-reichert-network-solutions-gmbh

Thanks Christian!

I tried the plug-in that you have suggested and its failing with this error message:

SAML Single Sign On failed - Atlassian Confluence Handling SAML-message failed: The user was not found

@ankit singhal,

Looks like the plugin doesn't find a matching User in the internal Confluence Database. So you either have not turned User creation on to create User if he doesn't exist or the Username transferred from Azure is not matching the Username in Confluence - so you may have to turn on UserId Transformation (for example dropping a @domain.com from the Username).

Why don't you book a quick screenshare session via https://resolution.de/go/calendly and one of our engineers can help you troubleshoot this.

Alternatively you can also open a normal support request via https://resolution.de/go/support


Cheers,
  Christian

Thanks for the quick response, Christian!

Could you tell me how to turn on UserId Transformation (for example dropping a @domain.com from the Username).

User.png

Hi @ankit singhal,

to turn on the UserID Transformation for dropping the domain part (@domain.com) from the Username (userid):

  1. Goto SAML Single Sign On configuration page (https://<baseurl>/plugins/servlet/samlsso/admin) -> Identity Providers -> User ID transformation
  2. Disable the checkbox The IdP's NameID attribute matches the user IDs in Jira. It should open further configuration fields.
  3. In the Userid Transformation field use 
    Replace: "(.*)@.*"    with: "$1"
  4. In the Test Input field below, add your Username. Check that the entered username is correctly transformed to the Output.
  5. Save the configuration page and try it again.

Here is a full screenshot of the configurations:

UserId transformation dropping domain part.png

 

I hope this helps.

Best Regards,

Christian

Thank you, Christian :)

Its working now.

Suggest an answer

Log in or Sign up to answer
Community showcase
Posted Feb 06, 2019 in Confluence

Try out the new editing experience

Hi team, I’m Avinoam, a product manager on Confluence Cloud, and today I’m really excited to let the Community know that all customers can now try out the new editing experience and see some of the ...

1,028 views 51 8
Join discussion

Atlassian User Groups

Connect with like-minded Atlassian users at free events near you!

Find a group

Connect with like-minded Atlassian users at free events near you!

Find my local user group

Unfortunately there are no AUG chapters near you at the moment.

Start an AUG

You're one step closer to meeting fellow Atlassian users at your local meet up. Learn more about AUGs

Groups near you