nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

Can I get SSO for JIRA and Confluence without Crowd?

unknown

I'm planning a combined installation of JIRA and Confluence with single sign-on. Reading the documentation I get the impression that Crowd is no longer needed for these two products. Is my assumption correct?

Also, should Crowd be needed later to support other products, is it easy to add Crowd when needed rather than from the beginning?

Accepted answers

Igor Sereda [ALM Works]

You can have SSO only with Crowd - JIRA user directory does not support SSO (although it's based on Crowd)

You can have a single set of users if you connect Confluence to JIRA user directory, but they will have to log in into each application.

All comments

Igor Sereda [ALM Works]

You can have SSO only with Crowd - JIRA user directory does not support SSO (although it's based on Crowd)

You can have a single set of users if you connect Confluence to JIRA user directory, but they will have to log in into each application.

Igor Sereda [ALM Works]

Can't tell whether it's easy to add Crowd. Probably Crowd instance can be connected to JIRA user directory and so you won't have to transfer the users, but it's just a guess.

Andrey Larionov1

Actually you could, by implementing RememberMeService (it's for JIRA, don't know Interface for Confluence) in each Application, but you should have federated authentication service, which guarantee security and validation of SSO process.

Dieter

You are right, an external Crowd server is not necessary anymore for new versions of JIRA and Confluence since these versions use an embedded Crowd server. All these embedded servers synchronize themselves independantly with an LDAP.

For small environment this is not a problem but if the number of your JIRA and Confluence servers grow and your LDAP contains a lot of users the delta synchronization time is getting painful. This can take up to two hours for a very large AD. So in this case it's worth considering to configure a dedicated Crowd server which of course must be licensed.

Due to the synchronization times we do not yet use Crowd but synchronize only the groups from the AD using our own mechanism.

I do not yet completely agree with the first answer. Out of the box you can get SSO with Crowd only, that's true, but you also can implement your own Authenticator .E.g. you an put your JIRA and Confluence behind a reverse proxy and let this do the authentication and pass along a header variable to the web app which says: "Hey, user xxxxx is authenticated by me".

Ellen Feaheny [

interesting note on the large AD server synching lags with embedded Crowd. Good to know that. Makes sense. Most our customers have Crowd so was wondering abt that and just didn't have many field experiences with the Embedded crowd synching btwn jira and confluence yet. good to know. thanks.

Pavel Petrlik

hello,

are these informations still up to date? do I need atlassian Crowd to set up SSO for JIRA and Confluence?

thanks a lot for answer

Felix Grund (Scandio)

I also disagree with Igor's answer. We are maintaining several instances of Confluence with SSO without Crowd, using Kerberos or NTMLv2 authentication with custom authenticators. This technique works for JIRA as well. This way, we don't need Crowd as "middleware" between LDAP and Atlassian applications.

Vinícius Ferrão

Felix, can you share the knowledge? Crowd has some limitations that we would give up SSO... but with your information this would be awesome. Thanks.

Felix Grund (Scandio)

Hi! Well, this post is now 5 years old and I think the landscape has changed significantly. I can't really provide you any up-to-date suggestion without doing some research first. But I know that I have a few co-workers who have been working on custom SSO things for Confluence and I could totally forward you to them if you're interested?

Vinícius Ferrão

Definitely! If it's not too much to ask, I would really appreciate. SSO with AD or FreeIPA is what I'm specifically looking for. Thanks.

Welcome!

It looks like you're new here. Sign in or register to get started.

Quick Links

Find more posts tagged with

confluence

jira

crowd