SSO SAML Jira DataCenter on Prem with ADFS

[Tim Schüder]

Hi there,

I try to set up a connection to use SSO with Jira DC 8.22 (with new SSO-Plugin) to our ADFS. After getting all the information needed I tested the connection and got the error message, that this site

https://OUR SITE/plugins/servlet/external-login/1

is not reachable .... 

Any idea to solve this issue?

Tim

[habib rahman · Accepted solution]

Hi @Tim Schüder  my name is Habib I will try my best to help you with the request above:

There are several possible reasons why you are unable to reach the external login URL for the SSO plugin in Jira DC. Here are some steps you can take to troubleshoot and resolve the issue:

1. Check your network connectivity: Ensure that your network connection is working properly and that you are able to access other websites. Try accessing the URL from a different network or device to see if the issue is specific to your current network or device.

2. Check for any firewall or proxy issues: Check your firewall and proxy settings to ensure that they are not blocking access to the URL. If you are accessing the internet through a corporate network, you may need to contact your IT department to ensure that the necessary ports are open.

3. Check your ADFS configuration: Verify that your ADFS configuration is correct and that it is configured to allow connections from the Jira instance. Ensure that the Jira instance is registered as a relying party in ADFS and that the correct certificates are installed.

4. Check the SSO plugin configuration in Jira: Verify that the SSO plugin is correctly installed and configured in Jira. Ensure that the plugin is enabled and that the correct settings are configured for your ADFS instance.

5. Review the Jira logs: Check the Jira logs for any error messages related to the SSO plugin or the external login URL. The logs may provide additional information that can help identify the issue.

6. Contact the plugin vendor or Atlassian support: If you are still unable to resolve the issue, you may need to contact the SSO plugin vendor or Atlassian support for further assistance. Provide them with as much detail as possible about the issue and the steps you have taken to troubleshoot it.

I hope these steps help you resolve the issue and successfully set up SSO with Jira DC and your ADFS instance.

Thank you 

Habib 

[Tim Schüder]

Hi Habib,
I actually could solve the problem with the help of Alexander from Atlassian. The problem was, that the ADFS did not sent the claim wanted in the configuration. We could fix it and now it works as expected.
Why the Tomcat crashes when the wanted or configured claim is not right is still not known...

Kind regards
Tim