Is it possible to use a self-hosted IdP in order to authenticate a cloud instance of jira via SAML?
We would like to use the Cloud instance but authenticate with an IdP on premise. So we do not want to use one of the oficially supported ones:
Microsoft Azure, OneLogin, Okta, and Bitium.
You definitely can use a self-hosted IdP to authenticate to Cloud, however, we only have instructions for the ones that are supported by Atlassian:
Atlassian supports OneLogin, Okta, and Azure, but you can use other IdPs that Atlassian doesn't support if you have another IdP. If you use an on-premise IdP, users will only be able to authenticate if they have access to the IdP (i.e. from your internal network or a VPN connection).
If you don't have instructions for your IdP:
One thing to keep in mind if you're using an unsupported IdP: Make sure that your IdP can send email using the NameId attribute. There are specific mappings you'll want to use in your IDP and you can find that information in the SAML single sign-on knowledge base article under Add the Atlassian application to your IdP > If you're using an unsupported IdP.
Connect with like-minded Atlassian users at free events near you!Find a group
Connect with like-minded Atlassian users at free events near you!
Unfortunately there are no AUG chapters near you at the moment.Start an AUG
We're bringing product updates and pro tips on teamwork to ten cities around the world.Save your spot