Enable SSO with computer AD log-in

[Heshan Manamperi]

Currently we use Crowd, JIRA, Conflu, Stash, Bamboo and Crucible. Also SSO is configured among these products. Crowd is connected with company AD and it has crowd internal directory as well. So internal users authenticate from crowd-> AD and rest uses crowd internal accounts.

Once user is log-in to his/her computer using company AD account, will it be possible to enable auto login to Atlassian systems as well. This is SSO between windows AD log-in and Atlassian systems.

[Bruno Vincent · Accepted solution]

Hello @Heshan Manamperi

Yes, it is definitely possible but you will need a third-party plugin for this. You might want to take a look at the IWAAC Kerberos SSO add-on that does exactly what you're aiming at.

IWAAC stands for 'Integrated Windows Authentication for Applications using Crowd'

Disclaimer: I work for the vendor of the IWAAC plugin.

[Heshan Manamperi]

Thanks Bruno

[Bastian Stehmann]

Hi @Heshan Manamperi,

I don't know if crowd supports this out of the box, but Jira for example supports this only in DC out of the box, if you are using Jira Server, you will need an Add-On for this. 

We have good experience with https://marketplace.atlassian.com/apps/1211923/saml-kerberos-single-sign-on-sso-jira?hosting=server&tab=overview for example.

[Heshan Manamperi]

Thanks Bastian

[Mateusz Miara]

Hello Heshan,

Crowd 3.4 has just came out and it comes with a functionality that might be of help to you - Crowd SSO 2.0 - Crowd’s single point of access for Jira, Jira Service Desk, Bitbucket, and Confluence across different domains with one common login page. For more information, see our documentation. 

Hope this helps,

Mateusz