SAML Single Sign-On (SSO) in Jira (SP) | Magento – Jira SSO Login

With the Quick Setup method, you can get the SP metadata from the first step of adding an IDP. The steps to initiate Quick Setup are given below :

• Click on the Add New IDP button in the Configured IDPs section.

• Select the Quick Setup option in the pop-up that opens.

• Select your IDP from the list of IDPs displayed

After completing the above steps, you will see the first step of the Quick Setup process. This step deals with setting up your IDP.

1.1: Service Provider Metadata

Here you will find your SP's metadata. You will need to provide this metadata to your IDP. There are two ways to add this metadata to your IDP.

 Import the metadata

• If your IDP supports importing the metadata, then you can choose By providing a metadata URL to the IDP.
• Depending on how your IDP accepts the metadata, you can either provide the metadata URL or you can use the Download Metadata button to download an XML file for the same.


Manually add the metadata

If you wish to add the metadata manually, then you can choose By manually configuring the metadata on your IDP . You will find the following information. These details will need to be provided to your IDP

• SP Entity ID
• ACS URL
• SP Certificate

• The next step of the Quick Setup flow deals with setting up IDP metadata on SP. We will pick this up in the next section of the setup guide.
• If you have chosen to add your IDP using the Quick Setup flow then you have already completed the first step, which is to add SP metadata to your IDP. Now you can proceed with the second step of the Quick Setup method

1.2: Configuring your Identity Provider

This step is where you will be adding your IDP metadata.

 Custom IDP name

• You can enter a name for your IDP int the Custom IDP Name field. In-case your use-case requires multiple IDPs, the SSO button for this IDP on the login page will display the custom name. If you do not wish to add a custom name, simply click on the corresponding drop-down and select no.

 Adding the IDP metadata

There are 3 ways in which you can add your IDP metadata. Use the drop-down to select any of the following methods :

  I have the metadata URL for my IDP

• Add your metadata URL in the Enter Metadata URL field.



  I have a file which contains the metadata

• Use the Choose File button to browse for your metadata file.


  I want to manually configure the IDP

To configure the IDP manually, you will need to have the following details from your IDP's metadata:

Single Sign On URL	Copy and paste the Single Sign On URL from the Magento IDP Metadata tab.
IDP Entity ID / Issuer	Copy and paste the IDP-EntityID/Issuer from the Magento IDP Metadata tab.
IDP Signing Certificate	Download the Certificate from the Magento IDP Metadata tab and paste it from the file.

• Single Sign On URL
• IDP Entity ID
• IDP Signing Certificate


  Testing the configuration

Once you have added the IDP metadata, click on Save. If the IDP has been added successfully, then you will see a Test and Get Attributes button. Click on this button to test if the IDP was added successfully.

1.3: User Profile

In this step you will be setting up basic user profile attributes for your SP

 Matching a user

• When the user logs into Jira, one of the user's data/attribute coming in from the IDP is used to search the user in Jira. This is used to detect the user in Jira and log in the user to the same account. You can choose which attribute will be used for this purpose using the drop-down provided.


 Setting profile attributes

• Setting up both Username and Email is required if you want to let users register. If the Test Configuration performed in the previous step was successful, then the inputs for the username and email attributes will be drop-downs. These drop-downs will contain all of the user's attribute names sent from the IDP. You will need to select the appropriate options containing the user's username and email.

1.4: User Groups - Default groups

• Select the users's default groups in this step. You can use the Default Groups to do this. Multiple groups can be set as default groups. The user will be assigned to these groups by default after successfully logging in via SSO.

• You can enable default groups for All Users or New Users using the Enable Default Groups for drop-down. Select None if you don't want to assign any default group to SSO users.

1.5: Troubleshooting and Support

• This step marks the end of the Quick Setup flow. In case you faced any issues or encountered any errors while setting up your IDP you can use the steps given in the Troubleshooting section to get in touch with us.
• You will also be able to see the results of a successful test configuration on this page. This includes the attributes received from your IDP, the SAML request sent and the SAML response received.
• Adding your IDP via this method will setup basic SSO for your end-users. You can always customise your setup further using the full set of features that we provide. To do this use the Edit drop-down for your IDP in the Configured IDPs page. From here you will be able to access your SP Metadata and customise your User Profile and User Groups settings. You can read more about these settings in the Custom Setup section of this guide.