How Illumadvisors Enabled Domain-Based SSO for Jira Service Management with miniOrange

How Illumadvisors Enabled Domain-Based SSO for Jira Service Management with miniOrange

Illumadvisors, a data-driven advisory firm, streamlined authentication for its Jira Service Management (JSM) customer portal using miniOrange’s SAML/OAuth SSO for JSM Customers combined with the miniOrange Identity Broker. The solution enabled secure Single Sign-On via Microsoft Entra ID with domain-based redirection, delivering a seamless and scalable login experience for external customers.

illumadvisors-image

Illumadvisors’ Business Challenge

Illumadvisors uses Jira Service Management as a customer-facing support and engagement portal for external clients. These customers are distributed across multiple Microsoft Entra ID (Azure AD) tenants, each associated with different email domains.


While Illumadvisors wanted to enforce SSO for all external users, Jira Service Management does not natively support:

  • Multiple IDPs without an enterprise plan.
  • Domain-based redirection for customers.
  • Automatic routing of users to different Entra ID tenants based on their email domains.
  • A seamless login experience without manual IdP selection

Without an automated routing layer, users would be forced to choose an IdP manually, increasing friction and support overhead.


How miniOrange Helped Solve Illumadvisors’ Challenge

To address both SSO enforcement and redirecting users based on their domains, miniOrange deployed a two-layer solution:


  • miniOrange SAML/OAuth SSO for JSM Customers to enforce secure Single Sign-On into Jira Service Management portal
  • miniOrange Identity Broker (IAM) to route users to the correct Microsoft Entra ID tenant based on their email domain

Domain-Based Redirection Across Multiple Entra ID Tenants

  • Detect the user’s email domain at login
  • Dynamically determine which Microsoft Entra ID tenant the user belongs to
  • Automatically redirect the user to the correct Entra ID tenant for authentication
  • Eliminate manual IdP or tenant selection

Once authentication was completed with the appropriate Entra ID tenant, miniOrange SSO for JSM Customers securely logged the user into the Jira Service Management portal.

This architecture ensured a seamless login experience while supporting Illumadvisors’ multi-tenant Entra ID environment.


Success Outcome: Seamless SSO Across Multiple Identity Tenants

By combining miniOrange IAM (Identity Broker) with miniOrange SSO for JSM Customers, Illumadvisors implemented a secure, scalable authentication framework tailored for external customers.

  • Enforce SSO for all external customers across multiple Microsoft Entra ID tenants
  • Route users to the correct Entra ID tenant using domain-based redirection
  • Remove manual IdP selection and reduce login friction
  • Deliver a consistent and intuitive customer portal experience

miniOrange strengthened Jira Service Management with robust tenant isolation, secure customer authentication aligned with Illumadvisors’ identity architecture.


About Illumadvisors

Illumadvisors is a U.S.-based advisory firm focused on delivering data-driven insights and strategic guidance to its clients. By combining advanced analytics with secure digital platforms, Illumadvisors helps organizations make informed decisions while maintaining strong governance and customer trust.




Author

Pallavi Narang

Share article