
## Simplifying Collaboration with OAuth SSO and SCIM {#how-atlassian-oauth-sso-and-scim-app-simplifies-user-management-and-collaboration}

Ever wondered how teams navigate the intricate landscape of digital collaboration and evolving workspaces? A team seamlessly orchestrating projects with tools like Jira and Confluence. But, as teams and projects grow, a new question arises: How do we simplify the authentication process without compromising security? To address the situation, the recommended approach is to incorporate the SCIM app with Atlassian OAuth Single Sign-On (SSO) for a more streamlined and effective solution.

&nbsp;

Jira excels as a project tracker, and Confluence plays a central role in collaborative content creation. User authentication across Atlassian products is crucial, and a robust Single Sign-On (SSO) solution becomes increasingly vital as these applications enhance productivity.

### Advancing Authentication: Atlassian OAuth SSO {#advancing-authentication}

Embracing the demand for streamlined and user-friendly authentication, Atlassian OAuth SSO emerges as a powerful evolution in secure access, eliminating the hassle of multiple passwords for users. As organizations navigate the complexities of growing teams and intricate projects, the shift to Atlassian OAuth SSO becomes a game-changer.

&nbsp;

However, for enhanced SSO and identity management, organizations turn to SCIM apps, either for Jira or Confluence – the transformative solution within the Atlassian ecosystem. Atlassian OAuth SSO ensures a streamlined login process, where users authenticate once through their identity provider (IdP) and gain secure access to Jira, and Confluence. However, the challenge lies in effective user provisioning and management.

### User Provisioning: The Missing Piece {#user-provisioning-the-missing-piece}

SCIM app transforms the puzzle of identity management into a work of art. It seamlessly integrates with Atlassian OAuth SSO, providing a unified solution for both authentication and user provisioning. Atlassian OAuth SSO brings the power of single sign-on, simplifying access for users across various Atlassian products. Meanwhile, SCIM app steps in as the missing piece, extending this simplicity to user provisioning, ensuring that user information is consistently accurate and up-to-date.

&nbsp;

This integration doesn't just stop at efficiency; it also fortifies security. By combining the robust authentication of Atlassian OAuth SSO with the seamless provisioning of SCIM, organizations can create a fortress of identity management. This not only safeguards against unauthorized access but also ensures that the right individuals have the right level of access at all times.

&nbsp;

Let's dive into how this dynamic duo, Atlassian OAuth SSO+SCIM App, can redefine your collaboration experience.

### Instant Gratification: Immediate User Provisioning {#instant-gratification-immediate-user-provisioning}

The concept of "Instant Gratification" within the context of SCIM app immediate user provisioning heralds a significant transformation in the landscape of user onboarding processes. In traditional systems, there exists a temporal gap between the moment a user is added to an identity provider and when they are granted access to specific applications, such as those provided by Atlassian.

&nbsp;

SCIM addresses this challenge by introducing a revolutionary approach that eliminates the delays associated with user provisioning. No more delays between adding a user to your identity provider and gaining access to Atlassian applications. This boosts efficiency, minimizes disruptions, and ensures that your team has instant access to the tools they need.

&nbsp;

### Dynamic Group Mapping: Effortless Synchronization {#dynamic-group-mapping-effortless-synchronization}

Mapping Identity Provider (IdP) groups to application groups with SCIM, streamlines user group and permission management. This enables automatic assignment and updates of user groups and permissions based on changes in IdP groups. For instance, if a user belongs to the administrators group on IdP, admin permissions can be assigned through mapping. If the user is later removed from the administrators group on IdP, they will be automatically removed from the application admin group.

&nbsp;

The mapping process provides two distinctive approaches: **Manual Group Mapping and On-The-Fly Group Mapping**. Manual Group Mapping is the preferred choice when there is a disparity between IdP group names and local application group names, necessitating the manual association of each IdP group with its counterpart in the application. On-the-Fly Group Mapping, on the other hand, is advantageous when IdP group names precisely match local application group names.

&nbsp;

### Syncing User Status with Ease {#syncing-user-status-with-ease}

While Atlassian OAuth SSO provides a robust single sign-on solution, ensuring synchronized user statuses poses a considerable challenge. In response, SCIM app emerges as the essential tool for seamlessly managing user status changes throughout your Atlassian suite, encompassing Jira and Confluence.

&nbsp;

When a user departs from an organization, SCIM app promptly deactivates their accounts across all integrated platforms. This proactive measure not only enhances security by swiftly revoking access but also simplifies the intricate process of user management. SCIM's synchronization capabilities extend beyond mere deactivation; it enables real-time updates, promptly reflecting changes in user roles and permissions across Atlassian applications. This not only ensures enhanced security but also contributes to cost savings by efficiently managing licenses through timely deactivation.

&nbsp;

### Tailored User Identities: Modify Group and Usernames {#tailored-user-identities-modify-group-and-usernames}

SCIM app allows you to modify groups and usernames with special rules. By implementing customized rules for groups and usernames, organizations can not only achieve uniformity but also bolster their security posture. Moreover, our SCIM app provides the ability to transform usernames systematically, ensuring that they adhere to your organization's standards.

&nbsp;

This not only promotes clarity but also aids in preventing potential security vulnerabilities associated with inconsistent or non-compliant usernames. Consistent and well-structured user identities across applications contribute to a more efficient and secure identity management system, ultimately enhancing the overall cybersecurity framework of your organization.

&nbsp;

### Attributes Redefined: Mapping and Customization {#attributes-redefined-mapping-and-customization}

Attribute mapping involves associating specific user details. By mapping key attributes like username, email, mobile number, and display name to your identity provider, you ensure precise user profiles, fostering a seamless environment across Atlassian applications. This process guarantees consistency and accuracy in user profiles across various platforms.

&nbsp;

It enables organizations to synchronize and uphold uniform information, promoting seamless data exchange and enhancing overall system interoperability. Attribute mapping and customization not only boost accuracy but also contribute to a more personalized and efficient user experience.

&nbsp;

### Embrace the Power: Atlassian OAuth SSO+SCIM App {#embrace-the-power-atlassian-oauth-sso-scim-app}

In a nutshell, Atlassian OAuth SSO+SCIM app is your ticket to streamlined user management and heightened security. While OAuth SSO ensures secure authentication, SCIM takes user provisioning and management to the next level. With immediate provisioning, automated group mapping, and real-time updates, organizations can elevate their security, compliance, and user experience across Atlassian's collaborative tools.

&nbsp;

Don't wait! Embrace the power of Atlassian OAuth SSO+SCIM App today. Experience a compelling solution that makes managing users in Atlassian's collaborative tools easier than ever. For a demo, reach us at **+1 978 658 9387**or email your queries to **support-atlassian@miniorange.atlassian.net**. We're eager to hear from you.


The Atlassian OAuth SSO+SCIM DC combination is not just a solution; it's an invitation to elevate your collaboration effortlessly. In this article, let’s go on a journey into the dynamics of Atlassian OAuth SSO paired with SCIM DC. A powerful integration that redefines user authentication, provisioning, and management across Jira and Crowd. Uncover the seamless synergy of this transformative duo as it elevates the overall user experience.

How Atlassian OAuth SSO and SCIM App Simplifies User Management and Collaboration


Your WordPress site is more than just a website; it's the heart of your online presence. Keeping it secure and running smoothly is key to providing a reliable user experience. One way to simplify access and strengthen your site’s security is by using [SAML Single Sign-On (SSO)](https://plugins.miniorange.com/wordpress-single-sign-on-sso). But what exactly is SAML SSO, and how can it help protect your WordPress site? Let’s break it down.

## What is SAML Single Sign-On (SSO)? {#what-is-saml-sso}

Imagine having a single key that unlocks all doors. Single Sign-On works in a similar way for websites and popular apps. Using [SAML (Security Assertion Markup Language)](https://www.miniorange.com/what-is-saml) protocol, SSO allows you to use one set of login credentials, such as a username and password, to multiple platforms without logging in separately each time.

Here’s how it works with your WordPress site. When a user tries to log in, the request is sent to an Identity Provider, also known as an IDP. The IDP is a trusted source that handles the login process. If the login is successful, it sends a secure confirmation to the Service Provider, or SP, which in this case is your WordPress site. Your site then grants access based on that trusted response, so there’s no need to log in again in SP.

This makes it easier and faster for users to reach what they need on your WordPress site without dealing with repeated sign-ins. It saves time and adds an extra layer of security while keeping the experience smooth and convenient.

## How SAML SSO Secures WordPress Sites? {#how-saml-sso-secures-wp-site}

Using [SAML Single Sign On (SSO)](https://plugins.miniorange.com/wordpress-single-sign-on-sso) can make accessing your WordPress site simpler and a lot safer.

Here's how:

### **Say Goodbye to Remembering Passwords**

We've all been there — trying to remember which password we used for a particular site. SAML Single Sign On cuts down on the need to remember all your passwords. Since users only need one set of credentials, they're less likely to pick easy-to-guess passwords or use the same password everywhere. This means users get the freedom to set complex and hard-to-hack passwords without the worry of remembering them, ensuring both security and ease.

### **Centralized Security For All Websites**

Similar to a security center where guards verify IDs before granting access to someone in a building, [WordPress SSO](https://plugins.miniorange.com/wordpress-single-sign-on-sso) serves as a central location for user identity verification. When users log in via Single Sign On solutions, their identities are confirmed, and they can access other connected services without having to verify their identities again.

### **Simplified User Login Process**  

Nobody likes to fill out long forms or remember another password. SSO makes the login process fast and simple, which means happier users, enhanced security, and fewer headaches for everyone involved. With Single Sign On solutions, users can focus on the tasks they need to complete instead of spending time and effort remembering different login credentials.

### **Boost Your Login Security**  

Most Identity Providers support [Multi-Factor Authentication (MFA)](https://www.miniorange.com/products/multi-factor-authentication-mfa) which can add an extra security layer to your WordPress SSO solution. It’s like a second lock on your door, which means even if someone gets your key (password), they still can't get in without the second lock's key.

### **Easy User Provisioning & De-Provisioning**  

Single Sign On simplifies the process of granting or removing new users/customers access to a WordPress website using its [SCIM User Provisioning](https://plugins.miniorange.com/wordpress-user-provisioning) feature. This helps keep the WordPress site secure by ensuring only the right people can get in.

## Why Do Enterprises Prefer SSO Over Native WordPress Login? {#why}

Enterprises often skip the default WordPress login system and choose Single Sign-On (SSO) for one simple reason: scalability and control. Here’s why SSO is better suited for enterprise use:

### **Centralized Identity Management** 

Enterprises already use identity providers like Azure AD, Okta, or Google Workspace to manage employee access. With SSO, WordPress becomes part of that central system.

### **Automated User Lifecycle Management**
SSO enables automatic provisioning and de-provisioning of WordPress users based on changes in the central directory. Native WordPress login offers no such automation and requires manual effort.

### **Stronger Security and Reduced Risk**
No need to create separate passwords for WordPress. This reduces phishing risk, credential reuse, and human error, common pain points in enterprise environments.

### **Consistent Access Policies Across Apps**
With native WordPress login, enforcing MFA, device-based access, or IP restrictions means relying on third-party plugins. SSO brings all of this under the IdP’s control, uniform and secure across all enterprise tools.

### **Audit and Compliance Ready**
All logins are logged by the IdP, helping enterprises meet internal and external compliance requirements.

Let’s take an example to understand this in an easier way. Consider a large enterprise that runs a WordPress-based learning management system (LMS) for 5,000+ employees. If they used native WordPress login:

- Every new employee would need a separate WordPress account
- Password resets would flood the IT team
- Removing access for former employees would require manual work

With SSO (e.g., Azure AD), access is granted or revoked automatically based on the employee’s status in the directory. Password policies, MFA, and group-based access are enforced centrally.


## Wrapping Up {#wrapping-up}

SAML SSO offers a win-win for WordPress site owners and users alike. It simplifies login while giving your site a solid boost in security.

If you're tired of juggling passwords and worried about keeping your site safe, it might be time to give [miniOrange SAML SSO](https://plugins.miniorange.com/wordpress-single-sign-on-sso) or [miniOrange OAuth SSO](https://plugins.miniorange.com/wordpress-sso) a try. These plugins can be integrated with various IDPs/servers like [Azure AD](https://plugins.miniorange.com/saml-single-sign-on-sso-wordpress-using-azure-ad), [Okta](https://plugins.miniorange.com/saml-single-sign-on-sso-wordpress-using-okta), [Keycloak](https://plugins.miniorange.com/keycloak-single-sign-on-wordpress-sso-saml) and many more.

Contact us at [wordpressteam@xecurify.com](mailto:wordpressteam@xecurify.com) to learn more about how our SAML Single Sign-On solution can benefit your organization.

Our team is ready to guide you through every step — from the initial consultation to deployment and beyond. Reach out today to take the first step toward effortless, secure authentication.

## FAQs {#faqs}

### **What Are the Benefits of Logging into WordPress with Third-Party SSO?**

Logging into WordPress using third-party SSO platforms brings key advantages for IT teams and users alike:

- **Centralized Access Control:** Manage user access across multiple applications, including WordPress, from a single identity provider (IdP).
- **Faster Onboarding & Offboarding:** User provisioning and de-provisioning are automated via the IdP, ensuring only the right people can access WordPress.
- **Fewer Passwords to Manage:** Users log in with their existing enterprise credentials, reducing password fatigue and the risk of reuse.
- **Improved User Experience:** Users enjoy seamless access to WordPress along with the rest of their apps, with fewer login interruptions.
- **Support for MFA & Conditional Access:** You can enforce organization-wide security policies like MFA, IP restrictions, or device-based login.
- **Better Audit & Compliance:** Centralized logs and identity governance make it easier to meet internal and external compliance standards.

This approach is especially useful for enterprises, LMS platforms, and internal portals where secure access and simplified management are top priorities.

## Additional Resources {#additional-resources}

1. [WordPress SAML Single Sign-On](https://plugins.miniorange.com/wordpress-single-sign-on-sso)
2. [WordPress OAuth Single Sign-On](https://plugins.miniorange.com/wordpress-sso)
3. [Multi-Factor Authentication (MFA)](https://plugins.miniorange.com/2-factor-authentication-for-wordpress-wp-2fa)
4. [WP SCIM User Provisioning](https://plugins.miniorange.com/wordpress-user-provisioning)
5. [Single Sign-On Examples](https://www.miniorange.com/blog/single-sign-on-examples)


With SAML Single Sign-On (SSO), you log into WordPress sites using one secure account. It means fewer passwords to remember, less chance of using weak ones, and easier access for you and your team.

How Single Sign-On (SSO) Makes Your WordPress Site Safer and Easier to Use?


## Elevating ITSM with Jira Service Management {#fortify-your-defenses}

IT service management platforms (ITSM) facilitate workflow management and data collection so businesses can plan, automate, control, and deliver seamless digital experiences. [According to the Gartner report Magic Quadrant for IT Service Management Platforms](https://www.atlassian.com/gartner/magic-quadrant-it-service-management-tools#:~:text=31%20October%202022.-,Atlassian%20is%20a%20Leader%20in%20the%202022%20Gartner%C2%AE%20Magic,service%20marks%20of%20Gartner%2C%20Inc.), Atlassian, with its Jira Service Management, is a leader in this area. In the ever-evolving landscape of IT service management (ITSM), seamless service delivery isn't just a goal; it's a necessity. 

&nbsp;

However, with the exchange of sensitive data being the norm, security isn’t just an option, it’s become the cornerstone of trust in such applications. Ensuring robust security for external customer portals has become paramount. Many organizations grapple with the challenges of Single Sign-On (SSO) integration and the complexities of managing a multitude of customer accounts. These hurdles can impede the seamless operation of Jira Service Management (JSM) Cloud, creating roadblocks for both businesses and their valued customers.
What was once a challenging endeavor has now been simplified with a groundbreaking solution: [SAML/OAuth SSO for JSM Customers](https://www.miniorange.com/atlassian/sso-for-jsm-customers) brought to you by [miniOrange](https://www.miniorange.com/).

&nbsp;

In this article, we delve deep into the realm of security enhancements, shedding light on the transformative capabilities of SSO for portal-only customers within the JSM Cloud environment and a couple of other extensions that would add value to your ITSM.


### Enhancing Security for Portal-Only Customers in JSM {#enhancing-security-for-portal-only-customers}

Single Sign-On (SSO) capabilities have been a significant challenge for Jira Service Management (JSM) Cloud users, particularly those with portal-only customers. Managing thousands of customer accounts can become cumbersome. However, imagine the convenience of allowing external customers to log in via SSO to your JSM portals. **miniOrange presents an exclusive solution** – [SAML/OAuth SSO for JSM Customers](https://www.miniorange.com/atlassian/sso-for-jsm-customers).
Our app extends SAML SSO capabilities to portal-only customers effortlessly. You only need to connect to your identity provider (e.g.miniOrange,Okta, AzureAD) through the app, enabling a secure and streamlined authentication process for external customers. 

&nbsp;

![Configuring SSO With Multiple Identity Provider](/blog/assets/2023/jsm-configure-idps.webp)

&nbsp;

Once authenticated through their identity provider, users establish a session on the JSM portal. With this session, they can access and monitor the progress of their tickets and perform relevant actions. This solution grants users access to the portal using their existing authentication credentials from a trusted identity provider.

&nbsp;

Let's explore how these improvements can empower your IT service management.

### Unlocking the Benefits {#unlocking-the-benefits-empowring-itsm-enhanced-security}

Enhanced security measures for portal-only customers within Jira Service Management Cloud offer not just protection, but a gateway to a world of advantages that elevates your IT Service Management (ITSM) strategy.

**Enhanced Security:**

By adding an additional layer of authentication, it ensures that your external customers must prove their identity before accessing the portal. This helps verify the legitimacy of users and prevents automated bots from creating accounts and submitting spam tickets easily.

![Mapping your specific customer portals](/blog/assets/2023/portal-access-management.webp)

&nbsp;


**Centralized User Management**

Leveraging an identity provider allows you to maintain a single source of truth for user identities and access controls of your external customers.
In addition to these benefits, our integration offers some notable features:

- Support for both SAML + OAuth/OIDC Protocols: This support allows you to seamlessly connect Atlassian Cloud to your OAuth/OIDC provider, ensuring a smooth authentication experience.

- Organization Mapping Based on Customer Domains and IDP Groups: Automatically assigns customers to specific organizations based on email domains and IDP groups, streamlining support workflows.

![Mapping your organizations based on email domains](/blog/assets/2023/organization-mapping.webp)

&nbsp;

- Multiple Identity Provider (IDP) Support: Users can choose from different trusted authentication sources when logging into the system.
- Two-Factor Authentication (2FA) on top of SSO: Adds an extra layer of security by requiring two forms of verification before granting access, enhancing portal security.
-  Easy User Management and Custom Domain Support: Simplifies user management, audit logs, and troubleshooting with quick access to help center links and configurable ticket fields.

&nbsp;

While [SAML/OAuth SSO for JSM Customers](https://marketplace.atlassian.com/apps/1229212/saml-oauth-sso-for-jsm-customers?hosting=cloud&tab=overview) addresses the pressing issue of security and user management in ITSM, a well-rounded ITSM solution demands more. As organizations of all sizes embrace Jira Service Management, we delve deeper into its core functionalities and explore how it fosters collaboration among development, infrastructure, and business teams.


### How to boost Jira Service Management {#how-to-boost-jira-service-management}

To truly enhance the customer-agent relationship and improve workflow efficiency, additional functionalities are often necessary in Jira Service management. Agents frequently encounter challenges such as insufficient information or delays in ticket resolution due to waiting for customer responses. This is where solutions like **'Customer and Organization Management' or ‘Feature Bundle for Jira Service Management' by Appsvio come into play**. Let’s check these extensions out…


&nbsp;

![Jira Customer Fields](/blog/assets/2023/jira-customer-fields.webp)

&nbsp;


**Customer and Organization Management**

This app addresses the information gap by facilitating fast and easy data gathering. It allows agents to collect additional customer context directly from the issue view. Customizing forms is straightforward; users can select field types and drag and drop them into the customer view. The collected data can be used to define JQL and SLA criteria, expediting request creation by copying values from the customer's profile to the issue.

&nbsp;

![Mapping your organizations based on email domains](/blog/assets/2023/troubleshoot-jira-ticket.webp)

&nbsp;

Customer and Organization Management also supports bulk actions, making it possible to assign customers to projects and organizations efficiently. This not only saves time for agents but also enhances communication by providing easy access to customer and organization information.


## Feature Bundle for Jira Service Management {#feature-bundle-of-jira-service-management}

Effective communication with customers is another key aspect of the Jira Service Management Portal. The 'Feature Bundle for Jira Service Management' offers banner functionality, enabling businesses to keep customers well-informed without inundating them with emails and announcements.
It's time to put more into customers' hands! With this feature, you can allow customers to edit their requests. Changing minds is natural. Why engage agents every single time to apply changes? Imagine that you have to modify dozens of requests one day – a waste of time. In our scenario, customers can decide on their own and make changes with ease.

&nbsp;

As an admin, you can define who is able to edit the request: Reporter/Participants/ Organizations. Appsvio once again uses drag-and-drop functionality to make it possible to create a form. Decide which fields can be edited. What’s interesting, it also supports Assets formerly known as Insight, so you can customize it as you need. 

&nbsp;


Another feature that empowers customers’ is the ability to display a customer's workflow can greatly improve the customer experience. Similar to tracking a package delivery, customers can now see where their requests stand in the process. With Feature Bundle, you can add workflow information to the request view and define conditions for when steps change, providing customers with real-time updates.

![Workflow displayed on the request view](/blog/assets/2023/workflow-display.webp)

## Final Word {#final-word}

Jira Service Management and SSO Integration are powerful tools in the realm of ITSM. While SSO Integration enhances security and user convenience, Jira Service Management thrives when complemented by extensions like 'Customer and Organization Management.' These solutions collectively empower ITSM to meet the evolving needs of businesses, ensuring seamless digital experiences for customers and streamlined operations for teams. Together, they represent a comprehensive approach to ITSM that drives efficiency, security, and customer satisfaction.

&nbsp;

Try out our plugin today at the Marketplace - [SAML/OAuth SSO for JSM Customers](https://marketplace.atlassian.com/apps/1229212/saml-oauth-sso-for-jsm-customers?hosting=cloud&tab=overview). If you have any other security requirements for Atlassian Cloud, do reach out to us at info@xecurify.com and we’ll surely help you out. 
Reach us at +1 978 658 9387 for a demo or email your queries to info@xecurify.com, we would be glad to take it forward from there. And you can also visit [Appsvio](https://www.appsvio.com/). 



Single Sign-On (SSO) capabilities have been a significant challenge for Jira Service Management (JSM) Cloud users, particularly those with portal-only customers. Managing thousands of customer accounts can become cumbersome. However, imagine the convenience of allowing external customers to log in via SSO to your JSM portals.

Elevating ITSM with Jira Service Management: A Spotlight on Security and Customer Service


## From Authentication to Empowerment: Harnessing OAuth and OpenID Connect for Atlassian App Advancements {#harnessing-oauth-and-openid-connect-for-atlassian-appdvancements}


So, you're in the midst of migrating your company's applications to a Data Center, huh? Well, you're definitely not alone. As the end of Server support looms, many companies are jumping on the migration bandwagon. And one thing they're considering is implementing Single sign-on (SSO) for their applications.

&nbsp;

Why, you ask? Well, SSO offers a slew of benefits like enhanced security, improved usability, and lower IT costs. Sounds pretty appealing, right? But here's the thing: when you're making the move to a data center and have an OAuth/OIDC provider, you'll need to decide if the native OAuth/OpenID Connect (OIDC) SSO option is the way to go.

&nbsp;

Now, let's talk about Atlassian's native OAuth/OIDC SSO. It's a simple implementation, sure, but it requires manual work and falls short of the features needed by major enterprises. And here's another challenge: configuring SSO within a reasonable timeframe is no walk in the park. Plus, debugging authentication issues without the right expertise can be a real headache. How long can you afford to troubleshoot while your users are left unable to access Jira? Definitely not ideal, right?

&nbsp;&nbsp;

### Empowering Your Data Center Setup with miniOrange OAuth/OpenID Connect {#empowering-your-data-center-setup-with-miniOrange-oauth-openid-connect}


This is where miniOrange comes to the rescue! Our [OAuth/OpenID Connect SSO](https://marketplace.atlassian.com/search?query=OAuth%20miniOrange) solution for Atlassian Data Center is packed with a whole bunch of powerful features. With miniOrange, you can achieve seamless login across Atlassian applications like Jira, Confluence, Bitbucket, and Bamboo with your OAuth or OIDC provider. Say goodbye to repeatedly entering credentials for each app!

&nbsp;

So, if you're looking to supercharge your Atlassian Data Center setup and keep your system secure, adding advanced SSO features on top of Jira and Confluence's native SSO is a must. We've got your back. Ready to explore the world of hassle-free authentication? Let's dive in!

&nbsp;

### Enhanced Security with Single Logout/OIDC Logout {#enhanced-security-with-single-logout-oidc-logout}


Do you know how sometimes we forget to log out of all the applications we use? Well, that can make our Atlassian applications vulnerable to cyberattacks. But don't worry; with the OIDC logout endpoint, once you log out from one of your connected applications, all the other applications connected to the provider log out automatically.

&nbsp;

A best practice supported by the OIDC protocol is to close all your sessions centrally from just one application! and it's a great way to keep your accounts safe and secure. No more worrying about leaving sessions open in multiple places. It's a game-changer for security!

&nbsp;

### Manage User Permissions in Data Center {#manage-user-permissions-in-data-center}


Handling users and their permissions in Atlassian applications can be quite a challenge for administrators. Automated provisioning makes things easier, and with this feature, administrators can manage groups in the OAuth/OpenID Provider and then sync or provision them in SSO-connected Atlassian applications.

&nbsp;

Now, here's where miniOrange's SSO plugin goes a little beyond. It lets you pick whether you want to sync all groups or just specific ones from the OAuth/OpenID Provider, depending on what suits your needs best. You also have the flexibility to include local groups and set up a few important groups as Default groups. What's neat is that after a user logs in through Single sign-on, these assigned groups will automatically be configured for them. 

&nbsp;
### Connect With Multiple Identity Provider Eas {#connect-with-multiple-identity-provider-eas}


When it comes to Enterprise organizations using Data Centers, things can get pretty complex, especially with their identity infrastructure. They have a bunch of Identity providers, some of which even use custom OAuth providers. And guess what? Different branches and divisions might be using them all at the same time.

&nbsp;

But don't worry, we've got you covered with miniOrange OAuth/OIDC SSO, as you can easily add multiple identity providers and enjoy a seamless login experience. No more headaches, just smooth sailing!

&nbsp;


### A Safety Net With Emergency URL and Group Restriction {#a-safety-net-with-emergency-url-and-group-restriction}


A valuable feature that provides a safety net for your users in case of any issues with your identity provider. This feature enables access to Jira/Confluence's default login page, allowing users to bypass Single sign-on and use their local credentials in case of disruptions. Even if SSO is enforced for all users, the emergency URL empowers you to access the default login page effortlessly.

&nbsp;

And to add an extra layer of security, we offer Group Restriction functionality. By enabling Group Restriction, you can specify certain user groups that will have exclusive access to the Emergency URL and, subsequently, the default login page. With these powerful options, you can ensure smooth operations and enhanced security for your Jira/Confluence environment.

&nbsp;

### Reduce Setup Time & Avoid Misconfiguration {#reduce-setup-time-and-avoid-misconfiguration}

When testing your setup in the test environment, you can conveniently export the configuration and apply it to the production environment. By utilizing the exported data, administrators can avoid the need to reconfigure settings from scratch, significantly reducing setup time and minimizing the risk of critical system misconfigurations. This feature is exclusive to administrators.

&nbsp;

### OAuth Provider Specific Documentation

[miniOrange OAuth/OIDC SSO](https://miniorange.com/atlassian/jira-oauth-openid-single-sign-on-sso#setup-guide-section) documentation provides comprehensive, step-by-step instructions on configuring SSO to seamlessly connect with various Oauth providers. As each Identity Provider follows its own unique approach, our documentation caters to the specific requirements of each provider, ensuring a smooth integration process.

&nbsp;

### Ease of Customization - Tailor Login, Logout, and Error Templates with Ease:


Our platform allows seamless customization of Login, Logout, and Error Templates, empowering users worldwide to personalize their templates to suit their specific requirements. With ‘Enhanced Oversight with Audit/Debug Logs’ you gain comprehensive insights into the plugin’s functionality with detailed logs, identifying any errors or issues promptly.

&nbsp;

### There You Have It, Time For You to Take the Call...


In a nutshell, the [miniOrange OAuth/OIDC](https://miniorange.com/atlassian/jira-oauth-openid-single-sign-on-sso) plugin is your go-to powerhouse for ensuring top-notch security while granting access to your Atlassian Data Center apps, no matter where your users are operating from. 

&nbsp;

If you're curious about diving deeper into how this tool can seamlessly integrate into your existing resources, don't hesitate to get in touch with us at **atlassiansupport@xecurify.com**. Alternatively, you can simply click here and explore how our plugin can cater to your Single sign-on (SSO) needs. We're here to help you every step of the way, as we believe that simplicity is the key, removing friction is paramount, and rethinking security is critical.

&nbsp;

Contact Us – Drop us a mail at **info@xecurify.com** or [raise a ticket here](https://miniorange.atlassian.net/servicedesk/customer/portal/2) to talk to us.





Are you currently in the process of migrating your company's applications to a Data Center? If so, you're not alone. With the looming end of Server support, many companies are now opting to join the migration trend. Among the considerations gaining significant attention is the implementation of Single Sign-On (SSO) for their applications. Let's delve into the details of this crucial aspect and understand why SSO is becoming a central focus for improved user experiences in the Data Center era.