Azure AD | Crowd | JIRA Software Serbver

[prasenna.kannan]

Team,

We have installed JIRA Software Server 8.12.1 version in our Azure VM connecting with Azure SQL.

By design if we have to integrate with Microsoft Azure AD, we have to install crowd for integrating users.

I have few questions related to the user management. 

1) Can I integrate multiple email accounts (user1@sit.application.com, user1@uat.application.com) in a single project?

2) Does JIRA Software Server support SAML on crowd?

3) Do we have to install Crowd on top of JIRA Software? We can't add it as a plugin in the JIRA Software itself?

Thanks,

Prasenna

[Christian Reichert (resolution) · Accepted solution]

Hi Prasanna,

for your purposes, you may be better of looking at a 3rd party app for Jira like ours; this adds SAML & the capability to directly synchronize Users straight into Jira without the need for Crowd.

You can include multiple accounts, multiple tenants that way as well.

Here are some links for you:

• Our YouTube Tutorial for our Plugin with Azure AD & User Sync 
• Our Step-by-Step Guide for Azure AD with User Sync
• Our Jira Plugin on the Marketplace

Our plugin is the most commonly & widely installed solution to this requirement. Especially since there is no out of the Box SAML support in Jira Server.

If you have any further Question feel free to raise them here or if you need a more private forum then raise a support request via our portal https://resolution.de/go/support

Cheers,
    Chris

P.S. Full disclosure, I work for resolution, a marketplace vendor.

[prasenna.kannan]

Thanks Chris!

I will take this to my management by proposing this plugin (

SAML Single Sign On (SSO) Jira SAML SSO

)

The benefits of this plugin over crowd is,

1) We don't have to install like Crowd, but just add the plugin from the marketplace. This will directly synchronise Azure AD users straight into JIRA. 

2) Multiple accounts, multiple tenants are supported out of the box using this plugin which is not straight forward with Crowd.

[prasenna.kannan]

@Christian Reichert (resolution) :

Couple of questions : 

1) For the plugin we are discussing other than the crowd, we don't need a separate database, we will have to just install it as a plugin from the MarketPlace, correct?

2) Also, I can see that the data is stored in EU \ Americas in the data protection statement. What data is stored in the region?The reason we had opted for JIRA Software Server version is to store the data in-house \ within Australian region. If the SAML SSO plugin is going to store any sort of data in European Union \ Americas, it breaks our compliance. Kindly let us know, what data is stored in European \ American region?

[Christian Reichert (resolution)]

Hi!

to 1) yes just the plugin. Everything is stored within Jira itself. No additional DB needed.

to 2) No data from your instance or from Azure is stored by us or even transferred via us.

The plugin for the User Synchronisation does direct REST calls via HTTPS from your Jira to Azure and stores all retrieved data in your Jira. We don’t see any of that.

As for the SAML authentication that goes between your Jira, the User Browser and AzureAd. Also no data shared with/via us.

The only data we get is the financial transaction information, who bought the plugin including technical & billing contact. The license Id as well as start & end date.

Also any information that you may voluntarily and intentionally submit to our Jira Servicedesk Cloud as Part of a support case that you may have to raise from time to time.

hope that clarifies.

cheers,

    Chris