As per our Corporate recommendation , We need to plan for authentication upgrade of JIRA and conflue

[vivekrao_k]

As per our Corporate recommendation , We need to plan for authentication upgrade of JIRA and confluence applications from LDAP to  KERBEROS authentication. We're also planning to upgrade  JIRA version from 7.12.3  to 8.8.0 and Confluence 6.12.2 to 7.4.0

Hence, would you please confirm JIRA and confluence do have compatibility with Kerberoes authentication ? If So, please do let us help with right guidance/ documentations to confirm the KERBEROS  services with our Corporate body? Our current LDAP is having 1000+ users geographically accessing from multiple countries.

Your quick response is really appreciated! 

[Andrew Laden]

Another option is EasySSO.

https://marketplace.atlassian.com/apps/1212581/easy-sso-jira-kerberos-ntlm-saml?hosting=server&tab=overview

I use it and have been very happy with both the addon and the support from the development team.

[Ed Letifov _TechTime - New Zealand_]

Thank you @Andrew Laden!

[Ed Letifov _TechTime - New Zealand_]

As mentioned by @Lars Olav Velle _Polar SSO_  you will require a 3rd party app to perform Kerberos SSO.

Please look at any of Kerberos SSO apps available on Marketplace.

As suggested by @Andrew Laden do try our EasySSO for Jira and EasySSO for Confluence apps – we offer 5 different authenticators: NTLMv2, Kerberos, SAML, X.509 and HTTP Headers to give you and your Solution Architects more choice in the SSO space. 

In particular, if you are running a Windows Domain, then with NTLMv2/Kerberos you can get a proper SSO between your Jira and your workstation – login once into your workstation, open the browser or click on a regular link (i.e. in the email) and you are "in" automaGically though the power of Integrated Windows Authentication, all using the industry-standard protocols supported by all major browsers, without any annoying SAML-related redirects.

Because we provide both Kerberos and NTLMv2 – ours will work on intranet, VPN, mobile networks and even over internet (though why would anyone do that is a big question).

Most importantly our support is 24x7, the link is available on the Marketplace listing. 

[Gonchik Tsymzhitov]

I use the Kantego:

https://marketplace.atlassian.com/apps/1211923/k-sso-saml-kerberos-oauth-for-jira?hosting=datacenter&tab=overview

it's good to have a personal tokens, before it ha been introduced by Atlassian

[Lars Olav Velle _Polar SSO_]

Hello @vivekrao_k 

To add support for Kerberos authentication you need to install an add-on (app). 

I work for Polarnight, one of the companies that offer Kerberos authentication.

Our documentation site has detailed instructions on how to get started. 

This one minute video shows how to set up Kerberos authentication. 

If you need any assistance setting it up, please reach out to support@polarnight.com, and we'll help you out.

Cheers,

Lars