Crowd Server SSO Domain Field not available ?

[Hans Pesata]

HI!

We are using crowd Server 3.70.

As mentioned here

https://confluence.atlassian.com/crowd/domain-17956963.html

SSO can be configured for Crowd Server if You use the same domainfor all used applications, but we dont see the SSO Domain field under the "SSO" tab.

Instead the text

You’re using Crowd Server license. The SSO 2.0 functionality is available only for Crowd Data Center license holders. You can still apply best practices for using SSO from our documentation.

How to configure SSO

appears.

How can we enable this field ?

Regards,
Hans

[Marcin Kempa · Accepted solution]

Hi @Hans Pesata ,

It looks like you are using Server license for Crowd which means you unfortunately cannot use SSO 2.0 functionality by doing configuration on SSO tab of application. However you can rely on earlier version of Crowd's SSO protocol which is described here https://confluence.atlassian.com/crowd/overview-of-sso-179445277.html?_ga=2.81818326.1539586708.1574772907-1148308928.1574772907

The downside is that this SSO version is bound to single domain and subdomains only so if you have two apps connected to Crowd which is in crowd.mydomain.com and app1 which is in app1.mydomain.com and another app2 in app2.example.com you cannot setup SSO between those with Crowd Server (you can do that with Crowd DC).

The domain field which you are probably looking is in 'General' options of Crowd in section 'Single Sign-On cookie settings' (navigate to {baseURL}/console/secure/admin/general.action).

In order to get this version of SSO working, you will also need to do some config file changes in Jira which unfortunately requires restart (https://confluence.atlassian.com/crowd/integrating-crowd-with-atlassian-jira-192625.html section 2.2). Crowd DC version does not have this limitation.

Regards,

Marcin Kempa