Trying to integrate Confluence server and Azure AD but its failing

[ankit singhal]

Installed Confluence server in Azure via Marketplace template.

Now, we are trying to integrate Confluence server and Azure AD using this article but not able to do it successfully:

http://www.identityandcloud.com/2017/08/sso-azure-ad-confluence/

While trying to run "Atlas-run" results in error:

[WARNING] Some problems were encountered while building the effective model for com.bitium.saml:SAML2Commons:jar:1.1.2

[WARNING] 'build.plugins.plugin.version' for org.apache.maven.plugins:maven-source-plugin is missing. @ line 132, column 21

Failed to execute goal com.atlassian.maven.plugins:maven-amps-dispatcher-plugin:6.3.13:run (default-cli) on project SAML2Commons: Couldn't detect an AMPS product to dispatch to -> [Help 1]

[Christian Reichert (resolution)]

Hi @ankit singhal,

sorry I can't help you with the bitium free plugin.

There are however other plugins available in the Marketplace (ranging from free to paid-for), if you want to try a different one.

A good overview: https://marketplace.atlassian.com/search?query=saml

Also some of the commercial plugins, like ours, are listed on the Azure Marketplace with a Tutorial - that has the advantage that you would not need the Azure AD Premium licenses to use it. As it's no longer a custom SAML app but a pre-defined & listed one (which also works in the free tier of Azure AD).

Hope this provides you with an alternative in case you don't get the above solved.

Cheers,
   Christian

Full disclosure: I work for a Marketplace Vendor - https://marketplace.atlassian.com/vendors/1210947/resolution-reichert-network-solutions-gmbh

[ankit singhal]

Thanks Christian!

I tried the plug-in that you have suggested and its failing with this error message:

SAML Single Sign On failed - Atlassian Confluence Handling SAML-message failed: The user was not found

[Christian Reichert (resolution)]

@ankit singhal,

Looks like the plugin doesn't find a matching User in the internal Confluence Database. So you either have not turned User creation on to create User if he doesn't exist or the Username transferred from Azure is not matching the Username in Confluence - so you may have to turn on UserId Transformation (for example dropping a @domain.com from the Username).

Why don't you book a quick screenshare session via https://resolution.de/go/calendly and one of our engineers can help you troubleshoot this.

Alternatively you can also open a normal support request via https://resolution.de/go/support

Cheers,
  Christian

[ankit singhal]

Thanks for the quick response, Christian!

Could you tell me how to turn on UserId Transformation (for example dropping a @domain.com from the Username).

[Christian Eitel]

Hi @ankit singhal,

to turn on the UserID Transformation for dropping the domain part (@domain.com) from the Username (userid):

1. Goto SAML Single Sign On configuration page (https://<baseurl>/plugins/servlet/samlsso/admin) -> Identity Providers -> User ID transformation
2. Disable the checkbox The IdP's NameID attribute matches the user IDs in Jira. It should open further configuration fields.
3. In the Userid Transformation field use 
   Replace: "(.*)@.*"    with: "$1"
4. In the Test Input field below, add your Username. Check that the entered username is correctly transformed to the Output.
5. Save the configuration page and try it again.

Here is a full screenshot of the configurations:

I hope this helps.

Best Regards,

Christian

[ankit singhal]

Thank you, Christian :)

Its working now.

[Emmanuel Alejandro Mateo Caja]

Thanks @ankit singhal . It helps me when I received this error:

SAML-Login failed: User was not found by ATTR_NAME