GSuite SAML SSO for Jira and Confluence

[Ganesh Babu]

Hello Community,

So here i explain my question in detail.

1. We are using Jira Server and Confluence Server and now we are planning to use SSO authentication using GSuite. Can anyone help with how SSO has to be implemented for the Server. As i know we can do this with Jira Cloud Variant.

2. Our Jira Server Version is 7.13 and i know for Server 8.x we have SSO 2.0, can that be used to perform the implementation. Because i dint find any handy documentation on that SSO 2.0 which is available on Jira Server 8.x 

3. If the above can be worked we need our existance version to upgrade and So is that the same in Confluence do we have any options as SSO 2.0 in any latest versions?

4. Please suggest me as how the approach should be whether to use a plugin that are available in the marketplace or upgrading both the Server version of Confluence and Jira Server.

Thanks well in Advance..!!

Regards,

Ganesh

[Alexis Robert · Accepted solution]

Hi @Ganesh Babu , 

I have setup SSO integration with GSuite for both Confluence and Jira without any issues, I have used the following plugin : 

• for Jira https://marketplace.atlassian.com/apps/1212130/saml-single-sign-on-sso-jira?hosting=server&tab=overview
• for Confluence https://marketplace.atlassian.com/apps/1212129/saml-single-sign-on-sso-confluence?hosting=server&tab=overview

They have a very easy to follow documentation available here : https://wiki.resolution.de/doc/saml-sso/2.2.x/jira/setup-guides-for-jira-saml-sso/setup-saml-sso-with-g-suite-google-apps-jira

For your question about upgrading Jira for SSO 2.0 I'm not sure I understand : why do you think you need to upgrade to Jira 8 ?

Let me know if this helps, 

--Alexis

[Ganesh Babu]

Hi @Alexis Robert 

May be my understanding is wrong but will explain it to you in detail.

1. What is that option SSO 2.0 available in Jira Server 8.x version?

Is that related to perform SSO without any plugins?

2. I thought we can use that if we upgrade. So can you help me as what it is exactly

[Alexis Robert]

Hi @Ganesh Babu ,

• SSO 2.0 is available only natively for Data Center products as show here : https://confluence.atlassian.com/enterprise/saml-single-sign-on-for-atlassian-data-center-applications-857050705.html
• For Jira Server, there is no native SSO integration. You need to have an addon to perform SSO
• It won't make a difference if you upgrade or not for SSO.

Let me know if this helps, 

--Alexis

[Ganesh Babu]

I just found this so i was confused @Alexis Robert .

[Alexis Robert]

Hi @Ganesh Babu , 

this menu is used for Crowd configuration. You won't be able to use it without purchasing Crowd.

[Ganesh Babu]

Thank you @Alexis Robert 

[Ed Letifov _TechTime - New Zealand_]

As @Jon Espen Ingvaldsen Kantega SSO  has mentioned, you need to use one of the SAML SSO apps from Atlassian Marketplace.

Do look at our EasySSO for Jira - we provide 5 authenticators: NTLM, Kerberos, HTTP Headers, X.509 and SAML. This gives you more choices for integrations, especially for clients that do not support SAML.

If you are going to use only our SAML authenticator - we provide discounts for this specific case to recognise that the extra costs our app has embedded in the price when used with NTLM and Kerberos, are not required for SAML, X.509 and HTTP headers authenticators.

Our support is 24x7. Feel free to reach out to us if you have any questions.

[Jon Espen Ingvaldsen Kantega SSO]

Hi @Ganesh Babu 

Your two options for achieving SSO in Jira and Confluence server is through Atlassian Crowd or third party marketplace apps.

What type of SSO do you plan to establish? Do you want to integrate with GSuite using  OpenID Connect or SAML? How to plan to provision users and group information into the Atlassian enviroment (Use Manual or just-in-time provisioning, or setup a synchronized user directory)? Do plan to enforce multi factor authentication? Should SSO login co-exist with traditional and native username and password login? 

There are many aspects around establishing SSO, and Crowd and all of the marketplace apps covers them to various degree.

Full disclosure: I work for Kantega SSO, one of the top marketplace SSO vendors. You find our guide for integrating GSuite with Jira and Confluence here: https://kantega-sso.atlassian.net/wiki/spaces/KSE/pages/17301515/Google+GSuite

Please reach out to our support team if you have any questions or want a screen sharing demo session.

Cheers,
Jon Espen
Kantega SSO