Create
cancel
Showing results for 
Search instead for 
Did you mean: 
Sign up Log in
Celebration

Earn badges and make progress

You're on your way to the next level! Join the Kudos program to earn points and save your progress.

Deleted user Avatar
Deleted user

Level 1: Seed

25 / 150 points

Next: Root

Avatar

1 badge earned

Collect

Participate in fun challenges

Challenges come and go, but your rewards stay with you. Do more to earn more!

Challenges
Coins

Gift kudos to your peers

What goes around comes around! Share the love by gifting kudos to your peers.

Recognition
Ribbon

Rise up in the ranks

Keep earning points to reach the top of the leaderboard. It resets every quarter so you always have a chance!

Leaderboard

sso into webauth

Hello.
If I have an existing installation of Crowd doing SSO with JIRA, Confluence, Bitbucket, Bamboo.... is it possible to add something like Webauthn?

There are some plugins for Webauthn like this one

https://marketplace.atlassian.com/apps/1222278/webauthn-for-confluence/

But I haven't seen something for doing SSO between all the Atlassian products.

1 answer

Hello @sebastian 

First of all thank you for your interest in our plugin. It is highly appreciated!

We will certainly consider your request and think about implementing SSO for our 2FA and Webauthn products.

Ed Letifov _TechTime - New Zealand_
Rising Star
Rising Star
Rising Stars are recognized for providing high-quality answers to other users. Rising Stars receive a certificate of achievement and are on the path to becoming Community Leaders.
May 20, 2020

@sebastian just out of curiosity, do you know what protocol you are using for Crowd SSO? Is it the "old" Crowd one or the SAML present in Crowd Data Center?

I suspect it will be very hard if not darn impossible to implement 2FA on top of the old protocol (since the actual communication happens in the background of the Atlassian application via REST) as a single app i.e. on the Crowd side. And to make the app commercial in each application you'd still have to buy separate apps.

So this is more of "if I passed 2FA in one application, how to securely store this fact and pass it to the other application so it doesn't have to ask it again"... And "securely" implies some central verification authority (like Crowd is for the cookies it issues to facilitate SSO) so... potentially an app in Confluence/Jira/Bitbucket/Bamboo each + app in Crowd they all talk to orchestrate the "I've already asked for 2FA in Confluence so don't bother do it again in Jira"

Honestly, sounds easier to ditch Crowd as the SSO solution and hook up to a SAML IdP that supports 2FA and webauthn (not sure if there are any)

@Yuliia Maidanova -Alpha Serve- all of the above just thoughts out loud, as this is an interesting domain, no "you can't do it" intended. In fact I am genuinely interested to see a solution

I don't know what protocol is being used but I know it's the datacenter edition.

Ed Letifov _TechTime - New Zealand_
Rising Star
Rising Star
Rising Stars are recognized for providing high-quality answers to other users. Rising Stars receive a certificate of achievement and are on the path to becoming Community Leaders.
May 20, 2020

I think it will be extremely important to clarify this if you hope to get a solution

I think this is the way it's being done now.

https://confluence.atlassian.com/adminjiraserver/connecting-to-crowd-or-another-jira-application-for-user-management-938847056.html

I'm not sure what kind of sso that uses... you basically do it throught the GUI of Crowd.

Ed Letifov _TechTime - New Zealand_
Rising Star
Rising Star
Rising Stars are recognized for providing high-quality answers to other users. Rising Stars receive a certificate of achievement and are on the path to becoming Community Leaders.
May 20, 2020

The link is for the old protocol when you only ever enter your password credentials in the login form of the application you are logging into e.g. Jira. Then switch to Confluence but you are already logged in.

If when going to Jira you are actually redirected to Crowd UI to login - that's SSO 2.0 which is SAML based: https://confluence.atlassian.com/crowd/crowd-sso-2-0-967322291.html via this app https://marketplace.atlassian.com/apps/1216096/sso-for-atlassian-server-and-data-center?hosting=server&tab=overview (with which, being free, we, the vendor of commercial EasySSO compete furiously... but futilely)

I was hoping to find a screenshot or video of how the experience looks like, but alas...

Suggest an answer

Log in or Sign up to answer
TAGS
AUG Leaders

Atlassian Community Events