SSO IN JIRA DC - Disable Username/Password with a Rollback ability

[Reab]

Dear,

We Configured Jira with the native SSO using OIDC and we want to disable the username/password login for all users. However, In case the IDP failed for any reason we need to have a way that allow the Jira admin to login to Jira. How to disable username/password while still having a proper way to recover form IDP failure. 

Thanks

[Lokesh Naktode_miniOrange · Accepted solution]

Hi @Reab , 

One of the best features of the Atlassian Datacenter framework is the built-in SSO. Without a doubt, Atlassian will continue to develop this over time, and they recently added support for multiple IDPs as well, but it still lacks some usability and security features like bypass SSO, Single Logout, Encryption, etc.

This KB document may help to configure the bypass SSO for JIRA Datacenter.

https://confluence.atlassian.com/jirakb/bypass-saml-authentication-for-jira-data-center-869009810.html

I am not sure this will work for OIDC SSO but since SSO is part of the same add-on, this configuration should work. 

Or, you can take a look at the third-party SSO add-on available on the Atlassian Marketplace, which provides, lots of usabilities as well security features.

https://marketplace.atlassian.com/search?query=OIDC%20SSO

Thanks,

Lokesh

PS: I work for the miniOrange, one of the top SSO vendors for Atlassian Marketplace.

[Reab]

Thanks, 

I tried this way but it didn't work for OIDC 

[Reab]

I tested it. it works with SAML but not OIDC