Single Sign-on

[KPT-ITS]

Can we use single sign-on option for JIRA and Bitbucket

Is it possible to block external users from bitbucket 

[Dave Bosman]

Hi Sreekanth,

Yes you can use SSO. 

there are plugins available to do that, or you can install crowd to manage your users.

See https://confluence.atlassian.com/crowd/integrating-crowd-with-atlassian-jira-192625.html

For Bitbucket you can set up the permissions per project and allow or reject anonymous users.

Regards

Dave

[Bruno Vincent]

You might want to take a look at the Integrated Windows Authentication for Apps using Crowd (IWAAC) plugin: https://marketplace.atlassian.com/plugins/com.cleito.iwaac/server/overview

IWAAC provides your Windows domain users with automatic logon on any application using Atlassian Crowd as its user management system, including Jira, Bitbucket, Confluence, Bamboo, FishEye, Crucible, Jenkins and G Suite (formerly Google Apps).

IWAAC is a generic plugin that works on all applications that are compatible with Crowd. Once you have purchased a proper license, you can deploy the plugin on as many applications (Jira, Bitbucket, Bamboo etc.) and server instances as you want since an IWAAC license is an Enterprise license that is valid for your entire organisation.

You can download IWAAC and test it for free at: https://www.cleito.com/products/iwaac/

[Lars Olav Velle]

Crowd offer a single logon across the Atlassian stack, but requires the user to log on.

Using kerberos you get desktop integration. That means if you are logged on to a mac/pc you are automatically logged on to kerberos enabled applicaions. 

The plugin will detect internal users and offer SSO. External uses can use the standard login form.

Here is an example: https://marketplace.atlassian.com/plugins/no.kantega.kerberosauth.kerberosauth-plugin/server/overview