Custom SSO 3rd party App to Jira

[Safa Ulukışla]

Hi,

We have a web application and Jira in our company, we want to log-in and log-out to the Jira using our custom web application how can I do this? I made a research about Oauth and Seraph, I'm pretty sure  Oauth is good for us and can you help to for the roadmap?

[Jon Espen Ingvaldsen Kantega SSO]

I would suggest to implement support for a standard SSO protocol, such as OpenID Connect (OIDC), in your web application. OIDC is an authentication protocol and an identity layer built on top of OAuth 2.0. It does everything OAuth does. Plus authentication. It uses JSON Web Tokens (JWT), called an ID token, to provide authentication information. 

You can read more about the practical differences between common authentication protocols here: https://kantega-sso.atlassian.net/wiki/spaces/KSE/pages/1736820/SAML+and+OpenID+Connect

If you custom web application can serve as an identity provider, then you can use SSO apps supporting OIDC (https://marketplace.atlassian.com/search?product=jira&query=Openid%20connect) to setup the integration and allowing users to login to Jira through the custom web app.

Hope this is helpful.

Cheers,
Jon Espen
Kantega SSO

[Lokesh Naktode_miniOrange]

Hi @Safa Ulukışla ,

As suggested OAuth/OIDC implementation will be the best solution for your use case where you just need to pass the logged in user information to JIRA via OAuth/OIDC Protocol and OAuth/OIDC app installed on JIRA will take care of the session management on JIRA Server.

Here is one of the popular OAuth/OIDC SSO app for JIRA Server on the Atlassian Marketplace.

https://marketplace.atlassian.com/apps/1217688/oauth-openid-connect-oidc-for-jira-sso?hosting=server&tab=overview

In case, your custom web application can server as OAuth/OIDC Provider, you can simply connect it with Jira for Single Sign-on using the suggested app. If not, please reach out to miniOrange support and we will help you to make your web application as an OAuth/OIDC provider for Jira.

Feel free to reach out to miniOrange support at info@miniorange.com in case of any questions or need assistance with this use case.

Thanks,

Lokesh

Full Discloser: I work for miniOrange.