Jira On Prem integration with OKTA

[Ahamed N]

Hi, 

I've integrated Jira On Prem with Okta as per the instructions on the below link. 

https://saml-doc.okta.com/SAML_Docs/How-to-Configure-SAML-2.0-for-Jira-On-Premise-SAML.html

So now, Jira can accessible only we have logged OKTA in the browser. But the issue is, whenever I've open Jira application from Okta, its prompting for the login credentials all the time. 

If we start a new session of Jira application then again it asks for the login credentials. I've double checked the instructions on the above link and its all validated. 

I've got one link where one use face the same issue but atlassian community asked him to verify the crowd-directory position for Okta. 

Here is the link,

https://community.atlassian.com/t5/Jira-questions/Not-able-to-login-to-Jira-after-integration-with-Okta-for-Single/qaq-p/898423

Could you please help me to fix the issue.  Thanks!

[Sherif Abdelfattah]

Hey Ahamed

Would you clarify what is the actual scenario you are experiencing after you have integrated Jira with Okta? are you able to access other applications integrated with your Okta SSO and Jira is the one failing to log you in?

Normally if things are working fine, Jira shouldn't be handling any authentication and the login process is handled by Okta.

The instructions in the link https://saml-doc.okta.com/SAML_Docs/How-to-Configure-SAML-2.0-for-Jira-On-Premise-SAML.html overrides the default Jira authenticator by the Okta one.

The idea of the SSO is that if you are already logged into Okta, you shouldn't need to specify the login credentials again, Okta would validate that you have a valid login token and shouldn't ask you for credentials again.

 Jira will always redirect you to Okta to validate your session, then Okta decides if you have a valid login session or not.

Could it be that your sessions are being expired for some reason?

You can test this further if Okta is integrated with other applications, you can then see if you can access them with your session or not.

[Ahamed N]

Hi Sherif, 

I've followed the same instructions on the below link. 

https://saml-doc.okta.com/SAML_Docs/How-to-Configure-SAML-2.0-for-Jira-On-Premise-SAML.html

My current scenario is we have multiple applications integrated with Okta and other applications are logging in without asking any of that application credentials if I have a valid Okta session. 

But when it comes to Jira, even If I've a valid Okta session, I'm not able to access without giving any login credentials. Do I need to change anything in the Jira server ? 

Thanks

[Ahamed N]

FYI 

We are using LDAP for Jira/Confluence. So do we need to do anything additionally which is not mentioned in the instruction link ?