Single Sign On Jira / Stash and Active Directory / Firefox

ChristianS June 6, 2013

Is there a way to have a SSO on Jira and Stash and Active Directory?

So when I'm logged in to my Windows that I get automatically logged in to JIRA and STASH when I open them in Firefox?

3 answers

1 accepted

2 votes
Answer accepted
David Tildesley June 13, 2013

Hi Christian,

OpenAM (OpenSSO) will do the job for you. You can configure OpenAM for Kerberos authentication and then follow these instrucitons: https://wikis.forgerock.org/confluence/display/openam/Integrate+with+Atlassian+Jira+and+Confluence

Regards,

David.

0 votes
Bruno Vincent
Rising Star
Rising Star
Rising Stars are recognized for providing high-quality answers to other users. Rising Stars receive a certificate of achievement and are on the path to becoming Community Leaders.
July 23, 2016

Hi Christian,

You might want to take a look at the Integrated Windows Authentication for Apps using Crowd (IWAAC) plugin: https://marketplace.atlassian.com/plugins/com.cleito.iwaac/server/overview

IWAAC provides your Windows domain users with automatic logon on any application using Atlassian Crowd as its user management system, including Jira, Confluence, Bitbucket Server (previously known as Stash), Bamboo, FishEye, Crucible, Jenkins and G Suite (formerly Google Apps)

You can download the plugin and test it for free at: https://www.cleito.com/products/iwaac/

0 votes
Sultan Maiyaki
Rising Star
Rising Star
Rising Stars are recognized for providing high-quality answers to other users. Rising Stars receive a certificate of achievement and are on the path to becoming Community Leaders.
June 6, 2013

Hi Christian,

SSO capability is introduced using identity management products such as the atlassian crowd with details on how this configuration can be done explained here There are other third party protocols such as the keberos which can be used in this scenario but am not sure of how it is configured and the details. You ight want to evaluate the crowd identity manager

ChristianS June 13, 2013

Oh, yeah I wanted to have a kerberos login or via the remote_user header in a browser.
i mean we wouldn't mind if we need to buy CROWD for it. but since, crowd won't give us browser kerberos auth or remote_user, its not the right product.

Suggest an answer

Log in or Sign up to answer