Update saml auth

[Carter Stagg]

I need to update my saml auth with keycloak from the config file. Currently I don’t have access to the admin ui but I do have access to the SQL server and the server that jira is hosted on. Is there a way to update the metadata url and the x509 cert so I can get SSO back on and working? 

[Carter Stagg]

i managed to find this for creating a local admin account: https://confluence.atlassian.com/conf64/restore-passwords-to-recover-admin-user-rights-936511358.html is there docs for a jira version of this. i can figure out how to jank it together but would rather follow supported documents 

[Kishan Sharma]

Hi @Carter Stagg 

Welcome to the Atlassian Community!

As community members, we do not have access to your data center instance. In this situation, I recommend contacting your internal Jira Admin Team for further assistance.

[Carter Stagg]

I am the admin, hence me saying I have access to my data base and config files. Our sso decided to update its x509 cert and now we are locked out of jira. I am wondering if it’s possible to update this via the config file or sql data base 

[Kishan Sharma]

Got it, I am unaware if it can be done via DB, but if you are unable to log in using your IdP,  you can temporarily bypass SAML authentication by using the auth_fallback functionality.

See Bypass SAML authentication for Jira Data Center for details, this way you can atleast login to the UI and make changes to the SAML configurations.

[Carter Stagg]

Perfect, the person who set this up previously didn't set up a local admin account or didn't document the credentials. is it possible to update the local admin via the config?