SSO with Azure AD

[Pedro Meireles]

Hello,

With the recent announcement from Atlassian that they will discontinue the server versions of their products we are looking at alternatives, namely using Jira Service Desk Cloud.

Right now we have Jira Server integrated with our internal AD, so users don't have to authenticate on yet another system. We recently moved our Exchange On-Premises to Office 365 so we now have also Azure AD. Is there a way to implement Single Sign-On for Jira Service Desk with Azure AD without needing Atlassian Access, that represents yet another cost per user?

Thanks in advance.

Kind regards,

Pedro

[Manon Soubies-Camy · Accepted solution]

Hi @Pedro Meireles,

Atlassian Access is the only way to set up SSO with AzureAD on Jira Cloud. Since you're on Jira Service Desk, one important thing to know is that JSD customers do not pay for Atlassian Access - only JSD agents need to get an Atlassian Access license.

More information here:

Are Jira Service Desk customers billable?

No, Jira Service Desk customers that submit tickets are not counted toward the Atlassian Access bill. Only Jira Service Desk Agents that log in using an Atlassian Access managed account are counted in Atlassian Access.

Hope this helps,

- Manon

[Pedro Meireles]

Thank you very much! I had no idea that my portal only users didn't have to pay for a license. This way it makes much more sense.

Kind regards

[Pedro Meireles]

Hi @Manon Soubies-Camy ,

After reading you reply I've tried to configure SSO with Atlassian Access and Azure AD, and although SSO is working for JSD agents, it doesn't work for JSD customers.

From your response I thought that it was possible to configure SSO for Jira Service Desk agents with Atlassian Acess and Azure AD and they wouldn't pay for the Atlassian Access License, but that doesn't seem to be the case.

Could you please confirm this?

Thanks!

[Manon Soubies-Camy]

Hi @Pedro Meireles,

I can confirm you can enable SSO for JSD customers but you may have to use the workaround suggested here:

If the customer (portal-only user) has an email address verified with Atlassian Access, site-admin can migrate the account to Atlassian account so that the customer can login with SSO.
Once migrated, ensure that the site access is enabled and ensure that there is no application access. This will ensure that there are no license consumed and have the users treated as a customer.

Hope this helps,

- Manon

[Ricky Maharaj]

Hello, we are now implementing Atlassian Service Desk and need to integrate SSO with AD Azure.  I could not find any documentation on how to do this.  Can someone provide a link to one?

[Jeevan Desarda]

Azure AD has a FREE plugin which you can use here. The plugin does support the Service Desk integration. You can get this plugin for FREE from here https://docs.microsoft.com/en-us/azure/active-directory/saas-apps/jiramicrosoft-tutorial and https://docs.microsoft.com/en-us/azure/active-directory/saas-apps/confluencemicrosoft-tutorial