Question about Application Link security

[Javier Perez]

Use case

There is a third party company that will integrate its product with our jira. Communication  will be through REST API. They want to create an Application Link between the two applications in order to stablish authentication.

Question

Since the application link will be created using jira admin credentials, would I be at risk of giving up jira admin permissions to the third party due to the stablished application link?

[Sebastian Kleinholz]

Sure it is a problem. They could login and do anything. But just be clever and ask them for their admin account. Then you can setup the application link and so they do not know the admin password of your Jira.