- Home
- SAML Cloud SSO
- SAML SSO Documentation
- Atlassian Cloud SAML Single Sign-On (SSO) with Azure AD
Atlassian Cloud SAML Single Sign-On (SSO) with Azure AD
With Jira SAML Single Sign-On (SSO) for Atlassian Cloud, you can securely log in to Atlassian Cloud using your Azure AD credentials. This app enables seamless Single Sign-On (SSO) for Atlassian Cloud accounts using existing Azure AD credentials.
Try it for freePre-requisites
-
Atlassian Guard (Atlassian Access) Subscription:
Atlassian Guard is an additional subscription applied across the Atlassian Cloud products, like Jira Software, Jira Service Management, Jira Work Management, Confluence, and Bitbucket. It is needed for Single Sign-On (SSO) or any Cloud Service across Atlassian Cloud products. -
Domain Verification:
An essential step to enforce SSO on managed user accounts through Atlassian Guard is Domain Verification. This process verifies that your organization has a valid domain for managing the user accounts and uses the same domain name for the email addresses.
References:
https://www.atlassian.com/software/guard/guide/getting-startedhttps://www.atlassian.com/licensing/atlassian-guard
Download and Installation
- Log in to your Atlassian Admin Console and select your site.
- Now, in the left sidebar, scroll down to the Apps section. Under Apps, select Site, which will open the site settings page.
- In the site settings, navigate to Connected Apps → Explore apps. (Alternatively, you can go to the Atlassian Marketplace and search for the app.)
- Search for miniOrange SAML SSO.
- Click “Try it free” to begin a new trial of the app.
- Now, in the top menu bar, go to Apps.
- Locate the “mO Jira SAML SSO” app and click to open it.
In this guide, we will demonstrate the setup in three parts:
- Configure SAML SSO connection between the miniOrange App (as SAML Client) and Azure AD (as SAML Provider).
- Configure SAML SSO connection between Atlassian Guard (as SP) and miniOrange App (as IDP).
- Add users to the SSO Authentication policy, and enforce the SSO.
Step 1. Configure SSO connection between the miniOrange App and Azure AD
- Once the plugin is installed, select the Apps section from the sidebar menu and click on the mO Jira SAML SSO.
- Next, you will be prompted with a welcome pop-up window. Click Start Configuration.
- Now, in the Configured Providers section, click the "Add Provider" button.
- Select Azure AD as the SAML provider.
- Go to the SP Information Tab, copy SP Entity ID, ACS URL, and SP certificate, and keep it handy, as you'll need it to configure Azure AD as the SAML provider.
- Now, log in to the Azure AD Portal.
- Select Microsoft Entra ID.
- Select Enterprise applications, click on New Application, and select Create your own Application.
- After creating the application, go to that application, click on Set up Single Sign-On.
- Click on SAML.
- Enter the Entity ID and ACS URL, which you copied from the SAML App in Basic SAML Configuration.
- Now go to Attributes and claims, click on Edit.
- Click on Add new claim, enter claim Name as email, select Source attribute as user.mail, and click on save.
- Now go to SAML certificates, copy the App Federation Metadata URI, and go to this URL in a new tab. Copy the X509 Certificate and keep it handy.
- Go to Step 4 and copy the Login URL and Microsoft Entra Identifier Value. You will need these values in the app for provider configurations.
- Now, return to the miniOrange App configuration page. (SAML Provider Configurations)
- Enter the IDP Entity ID (Microsoft Entra Identifier), Single Sign On URL (Login URL), IDP Signing Certificate (X509 Certificate), and Email Attribute (email), and click Save Configuration.
Step 2. Set up SSO between Atlassian Guard and miniOrange App
After saving the SAML Configuration, you’ll be required to configure Atlassian Guard and the miniOrange SAML SSO App.
- A pop-up notification will appear, asking you to complete the Atlassian Guard configuration.
- Click on Configure Guard, and you will be navigated to the Guard Configurations section.
- In this section, you will find the Plugin Metadata details.
- Copy and keep the following values handy. You’ll need them while setting up your Identity Provider in Atlassian Guard:
- IDP Entity ID
- IDP SSO URL
- IDP Public X.509 Certificate
- Open the Atlassian Admin Console and navigate to the Security tab.
- Under User Security, click Identity Providers.
- Select Other to begin configuring a custom Identity Provider.
- Provide an appropriate name, select Set up SAML Single Sign-On, and click Next.
- Now, paste the IDP Entity ID, IDP SSO URL, and Public X.509 Certificate that you copied from the plugin configuration.
- Click Next and copy the Service Provider Entity ID and Service Provider Assertion Consumer Service URL. Keep these handy as they’re required to complete the plugin configuration.
- Complete the rest of the Atlassian Guard configuration.
- Once you’re done, return to the plugin, go to the SP Metadata tab in the Guard Configurations section, and click Next.
- Enter the SP Entity ID and Assertion Consumer Service (ACS) URL that you copied, and click Save Settings.
Note: In case you manage multiple organizations, you’ll
have to select the intended one after accessing the admin
console.
Step 3: Configure SSO Authentication Policy
Once all the SSO Configurations are done, you need to add users to the Authentication Policy and enforce Single Sign On.
After saving the SP Metadata, click Next to find the steps for adding the users to the Authentication policy.
Now you can seamlessly enjoy Single-Sign On into Atlassian with your preferred SAML provider, with our miniOrange app.
Additional Resources
Did this page help you?
×
![]()