Follow the Step-by-Step Guide given below for Jira Single Sign On (SSO) using Bitium as IdP

STEP 1: Configure Bitium as IdP

• Log into Bitium Admin Portal.
• Once you have logged into your Bitium Admin portal, click on the Manage button in the top navigation bar for your organization, and then click on Manage Apps.



• In the top right corner, click on Add More Apps. You will see a search box, then search for Jira, and add the app to your Bitium account.



• Here we will start configuring SSO. First, select a name for your page, then select SAML Authentication from the dropdown menu. Once you are done, click on Install App.



• On the next screen, click on Configure Single Sign-On.



• Here, we will exchange a few values between Bitium and Jira.
  
  

  SAML URL

  Copy/Paste ACS URL from Configure IDP tab

• Click on Save.
• Copy the following URL/Endpoints. These will be required while configuring the plugin. Copy the X.509 Certificate text area value and keep it handy.



• Now, assign the Jira app to your users in the Apps Overview section.

STEP 2: Configuring Jira as SP

• In miniOrange SAML plugin, go to Configure SP Tab. Enter the following values:

IDP Entity ID:	Entity ID from the Single Sign On tab in Bitium
Single Sign On URL:	Login URL from the Single Sign On tab in Bitium
Single Logout URL:	Logout URL from the Single Sign On tab in Bitium
X.509 Certificate:	Paste the X.509 Certificate value from Single Sign On tab in Bitium

• In miniOrange SAML plugin, go to Attribute Mapping tab. Enter the following values:
  
  

  Username:	Name of the username attribute from IDP (Keep Username as NameID by default)
  Email:	Name of the email attribute from IDP (Keep Email as NameID by default)
  FirstName:	Name of the firstname attribute from IDP
  LastName:	Name of the lastname attribute from IDP




• Go to Role Mapping tab. Enter the following values:

Role Mapping

Name of the Role attribute from IDP

• You can check the Test Configuration Results to get a better idea of which values to map here.
• Under the Role Mapping Section, configure which GROUP value coming in the SAML response needs to be mapped to which role. The Group value coming in the SAML response will be mapped to the Role assigned here and the user will be assigned that role.



• Go to Sign In Settings tab. Enable auto-redirect to IDP using Disable Jira login option.