Connecting JSM to AFAS

[Deleted user]

Hi,

Does any1 has a connection live between AFAS and JSM? The idea is that when an new employee starts he/she gets instant access to the customerportal. But also when an employee leaves he/she will be removed from the portal.

i am curious to know what is used to get this done and/or how it is done!

thanks in advance,

Folco

[Dave Rosenlund _Trundl_ · Accepted solution]

Welcome back to the community, @[deleted]  👋

I am only finding a few mentions of AFAS  here in the community, and they are attached to unanswered questions. I presume you will have a similar experience on this topic.

Suggestion: Look for an SSO solution that can span/support AFAS and Atlassian.

I hope this helps,

-dave

[Deleted user]

hi Dave,

tx for you answer :) I would like to manage users in one place. So when some1 starts the user will after creation in AFAS also created in AD and in Atlassian. And vice versa when some1 leaves. Not sure if SSO will create this possibility. what do you think?

regards

Folco

[Dave Rosenlund _Trundl_]

Hi, @[deleted]  I think this will be possible with SSO and some cleverness/automation on your part. 

Let me see if some folks that I know who are much more expert in this sort of thing will chime in here.

[August Heltne - Kantega SSO]

Hello @[deleted]

It sounds like you want to look into configuring System for Cross-domain Identity Management (SCIM) for your instance. While AFAS is not listed as a supported identity provider by Atlassian, you can find a generic guide to configuring user provisioning here: https://support.atlassian.com/provisioning-users/docs/configure-user-provisioning-with-an-identity-provider/

If you configure SCIM for your Atlassian instance, I would also recommend configuring SSO to handle authentication. This way user accounts will be created in your Atlassian instance based on AFAS with SCIM, and when the users try to authenticate, they will be redirected to AFAS to log in.

Unfortunately, I was not able to dig up much information about AFAS and its support for different protocols, but hopefully this post gives you enough information to find that information on your own.

While your question is how to use AFAS as a source of truth, I would recommend considering using AD as your source of truth for users as this will likely lead to easier configuration and maintenance of SSO and SCIM as it is a more standard solution.

Regards,
August Heltne