JIRA Service Desk SSO (oAuth)

[Jesse Reitsma]

Hello,

We're looking for a way to login to JIRA Service Desk from our own custom customerpanel.
So when our customer logs in to our custom customerpanel, they will see a link to Service Desk.
Once they click that link, they should be redirected to Service Desk and be logged in.

The userbase for the customerpanel is our own, not JIRA's.
Are there any ways to accomplisch this? For example with oAuth 2.0?

I hope you guys can help me out.

Edit: We're using JIRA Server (hosted)

Regards,
Jesse

[sarel botha]

I've created an Authenticator that works using JWT. It automatically adds a user if the user does not exist already. It is pretty easy to get it going. You can get it here: https://github.com/sjbotha/jira-jwt-authenticator/

[Guido Leenders]

There is a long thread on this on https://jira.atlassian.com/browse/JSDCLOUD-630. Bottom line as of October 2020:

• when less than 5000 users Access might work for Jira customers 
• Or create your own service desk user interface
• switch to Freshdesk or Zendesk

[Lars Olav Velle]

Hello Jesse!

Have a look at our Kerberos/SAML plugin.

With Kerberos, your internal users are automatically logged in. Customers and mobile devices can benefit from SSO with SAML.

There is no need for any modification of your JIRA/Service Desk installation other than installing the add-on!

https://marketplace.atlassian.com/plugins/no.kantega.kerberosauth.kerberosauth-plugin/server/overview

Reach out to us at SSO@kantega.no, and we are hppy to help!

[Jesse Reitsma]

Can I do something like this with Crowd?

[Bruno Vincent]

Yes, Crowd could be an option but as far as I can read from your particular context it sounds like a a more complex option than customising Seraph. What is your custom userbase? (LDAP? Database?)

[Bruno Vincent]

Hello Jesse,

You can actually implement SSO between your custompanel and Jira with Atlassian Seraph (aka the authentication framework on which Jira is based).

You will need to edit seraph-config.xml so as to tell Jira to redirect unauthenticated users to the customerpanel authentication form and write your own custom authenticator to provide them with Single Sign-On.

[Jesse Reitsma]

Thank you for your answer, Bruno.

I don't have any expierence with Java.
Do you know how much code is involved?
Is it only the piece of code on the following page:
https://docs.atlassian.com/atlassian-seraph/latest/sso.html ?

Thanks in advance,
Jesse

[Bruno Vincent]

Hi Jesse,

Sorry for the delay in replying. Looks like I didn't get the notification.

Yes, that's pretty much it.

In Jira's case, you will need to extend JiraSeraphAuthenticator (which extends  DefaultAuthenticator itself) as explained on this page: https://confluence.atlassian.com/kb/single-sign-on-integration-with-the-atlassian-stack-794495126.html