SAML for Jira Administrator section

[Murugan Mittapalli]

Hi, 

I have configured SAML for Jira Datacenter, I can able to log in normally using the SSO password but when I try to access the Administrator section it is not accepting the SSO password but it is accepting the internal directory user password and I want to authenticate it using SSO only but not using internal password 

Thank you.

[Sachin]

Hello @Murugan Mittapalli , if you are using SAML Single Sign On (SSO) plugin then you need to follow the steps mentioned in Deny Pwd Authentication 

- So download https://wiki.resolution.de/doc/saml-sso/3.0.x/jira/further-configuration/deny-password-authentication
- Copy denypasswordauthenticator-<version>.jar into the applications lib directory (/opt/atlassian/jira/jira/WEB-INF/lib)
- Edit seraph-config.xml in the classes-folder, e.g.
/opt/atlassian/jira/atlassian-jira/WEB-INF/classes/seraph-config.xml 

- Comment out the existing authenticator definition and replace it with de.resolution.samlsso.authenticator.JiraDenyPasswordAuthenticator

<!-- <authenticator class="com.atlassian.jira.security.login.JiraSeraphAuthenticator"/> -->
<authenticator class="de.resolution.samlsso.authenticator.JiraDenyPasswordAuthenticator" />

Note: You can also remove below section from "Page templates" --> "Logged out page template" , so that users won't see login with username/password when they logout.

#if($loginurl)
<p><a href="$loginurl">Login with username and password</a></p>
#end 

[Lars Olav Velle _Polar SSO_]

Hello  
I do not think this is possible with the built-in SAML app. 
 
With Polar SSO, a newly released app on the Atlassian Marketplace, SAML on secure administrator sessions (WebSudo) is now available.
In addition, you can create multifactor policies, deny login policies, login without password using face and fingerprint, and much much more.
This is of course without editing any files on the file system :-)
 
Cheers, 
Lars

[Lars Olav Velle _Polar SSO_]

Hello  

I do not think this is possible with the built-in SAML app. 

With Polar SSO, a newly released app on the Atlassian Marketplace, SAML on secure administrator sessions (WebSudo) is now available.

In addition, you can create multifactor policies, deny login policies, login without password using face and fingerprint, and much much more.

This is of course without editing any files on the file system :-)

Cheers, 

Lars

[Lars Olav Velle _Polar SSO_]

Hello  

I do not think this is possible with the built-in SAML app. 

With Polar SSO, a newly released app on the Atlassian Marketplace, SAML on secure administrator sessions (WebSudo) is now available.

In addition, you can create multifactor policies, deny login policies, login without password using face and fingerprint, and much much more.

This is of course without editing any files on the file system :-)

Cheers, 

Lars

[Lars Olav Velle _Polar SSO_]

Hello @Murugan Mittapalli 

I do not think this is possible with the built-in SAML app. 

With Polar SSO, a newly released app on the Atlassian Marketplace, SAML on secure administrator sessions (WebSudo) is now available.

In addition, you can create multifactor policies, deny login policies, login without password using face and fingerprint, and much much more.

This is of course without editing any files on the file system :-)

Cheers, 

Lars

[Lars Olav Velle _Polar SSO_]

Hello @Murugan Mittapalli 

I do not think that is possible to re-validate your credentials on Jira secure administrator sessions (WebSudo) using the built-in datacenter SSO.

With Polar SSO (a brand new app on the Atlassian Marketplace) this is now possible: https://marketplace.atlassian.com/vendors/1216264/polarnight 

In addition you can have multifactor policies, deny login policies, passwordless login using face and fingerprint and many other cool new features. 

Of course, this is without modifying any files on disk at all :-)

Cheers,

Lars