Child pages
  • Integrate with Atlassian Jira and Confluence
Skip to end of metadata
Go to start of metadata

About this Howto

This Howto describes how to enable SSO for JIRA/Confluence and other apps utilizing Atlassian Seraph.


The sources are available from the ForgeRock Subversion Repository in community/extensions/seraphprovider. For more information on checking out this code please read this howto.


Use maven 2.x, all artifacts should be already configured in the pom.xml. By default the pom is configured to use snapshot9, but you should update to reflect the version of OpenAM deployed.



  1. Copy the OpenAM client sdk to atlassian-jira/WEB-INF/lib/
  2. Create/copy an to atlassian-jira/WEB-INF/classes/ (or somewhere in the classpath)

    Creating an file

    To create an file you can simply run scripts/ from the client SDK samples. More information for the client SDK is on the Oracle Site. Additionally more specific information about the file is also available.

  3. Copy this projects jar to atlassian-jira/WEB-INF/lib/
  4. edit atlassian-jira/WEB-INF/classes/seraph-config.xml



In older versions of Jira comment out this line

<!-- COMMENT OUT THIS LINE authenticator class="com.atlassian.seraph.auth.DefaultAuthenticator"/-->

In newer versions of Jira you will need to comment out this line:

<!-- <authenticator class="com.atlassian.crowd.integration.seraph.JIRAAuthenticator"/> -->

For very old versions of Jira, add this line.

<authenticator class="com.sun.identity.provider.seraph.OpenSsoAuthenticator"/>

For recent versions of Jira, add this line.

<authenticator class="com.sun.identity.provider.seraph.OpenSsoJiraAuthenticator"/>

You will need to restart JIRA for changes to take effect.

Additional Steps

You may need to do one of two things:

  1. If you have a public JIRA, you're done.  Although you will still see the login form so you may want to remove that template.
  2. If you have a private JIRA and always to be redirected to SSO - see no login form/links -

add to atlassian-jira/WEB-INF/classes/seraph-paths.xml

<path name="user">

Confluence 3.0 and greater

Installation is much the same for Confluence. 


  1. Copy the OpenAM client sdk to atlassian-confluence/WEB-INF/lib/
  2. Create/copy an to atlassian-confluence/WEB-INF/classes/ (or somewhere in the classpath)
  3. Copy this projects jar to atlassian-confluence/WEB-INF/lib/
  4. edit atlassian-confluence/WEB-INF/classes/seraph-config.xml
  5. Update the login.url, link.login.url and logout.url parameters as before. 

Comment out this line.

<!-- &nbsp;<authenticator class="com.atlassian.confluence.user.ConfluenceAuthenticator"/> -->

replace with this:

<authenticator class="com.sun.identity.provider.seraph.OpenSsoConfluenceAuthenticator"/>

You will need to restart Confluence for changes to take effect.

  • No labels