SSO for Confluence

[Ed Selig]

I see that there is a way to setup single signon for Jira, but I am not seeing anything for Confluence.  We have a data-center version of confluence that is accessed using a domain account.  Does anyone know of an easy way of setting up single sign on with the users AD account?

[Ed Letifov _TechTime - New Zealand_]

The easy way of setting up Confluence SSO with users' AD accounts is ... to use EasySSO for Confluence

We give you 5 different authenticators, including both NTLM and Kerberos – so Integrated Windows Authentication will work both on the internal network and in the "hairy" cases e.g. over VPN, with browsers automatically falling back on NTLMv2 when Kerberos is not available.

And if your IT Security Team insists on you seeing the redirect screens to your IdP-of-choice for the sake of centralised control on the IdP side (e.g. 2FA on ADFS or AzureAD level) - we also offer you SAML in the same package.

Our support is 24x7 - reach out if you find any of these not easy enough.

[Jon Espen Ingvaldsen Kantega SSO]

As @Kurt Klinner suggests, two alternative protocols for SSO are SAML and OpenID Connect.

There is also a third alternative, Kerberos, for organizations using Active Directory. This SSO mechanism will authenticate users automatically on trusted networks and without showing any login screens at all. The following short article describes the user experience and shows how simple it can be achieved: https://kantega-sso.com/articles/kerberos/

It is possible and common to use such SSO protocols in combination, where kerberos gives users on office network the most user friendly user experience, while users working remote have to login through a SAML or OpenID Connect provider.

Regards,

Jon Espen

Kantega SSO

[Kurt Klinner]

@Ed Selig 

Hi Ed

https://confluence.atlassian.com/doc/single-sign-on-for-confluence-data-center-879955981.html is a good place to start, depending if you would like to use SAML or OpenID you can than follow the contained links

Cheers

Kurt