Jira SAML Single Sign-On (SSO) Integration with Drupal as IdP

Overview

This guide will help you integrate Drupal as a SAML 2.0 Identity Provider (IdP) and Jira as a Service Provider (SP) using the miniOrange SAML IDP module. This integration enables centralized user management and permission control, allowing users to access multiple applications with a single set of credentials. The module is compatible with Drupal 7, Drupal 8, Drupal 9, Drupal 10, and Drupal 11.

Installation Steps

• Using Composer
• Using Drush
• Manual Installation

• Download the module:

  Composer require 'drupal/miniorange_saml_idp'

• Navigate to Extend menu on your Drupal admin console and search for miniOrange SAML Identity Provider using the search box.
• Enable the module by checking the checkbox and click on install button.
• Configure the module at

  {BaseURL}/admin/config/people/miniorange_saml_idp/idp_setup

• Install the module:

  drush en miniorange_saml_idp

• Clear the cache:

   drush cr

• Configure the module at

  {BaseURL}/admin/config/people/miniorange_saml_idp/idp_setup

• Navigate to Extend menu on your Drupal admin console and click on Install new module button.
• Install the Drupal SAML IDP 2.0 Single Sign On (SSO) - SAML Identity Provider module either by downloading the zip or from the URL of the package (tar/zip).
• Click on Enable newly added modules.
• Enable this module by checking the checkbox and click on install button.
• Configure the module at

  {BaseURL}/admin/config/people/miniorange_saml_idp/idp_setup

Configuration Steps

Drupal SAML IdP Metadata:

• After installing the module on your Drupal site, in the Administration menu → navigate to Configuration → People → miniOrange SAML IDP Configuration. (/admin/config/people/miniorange_saml_idp/idp_setup)

• Under the IDP Metadata tab, click on the Download metadata button. Keep it handy. (This information is required to configure Jira as SAML SP.)

Pre-integration: Jira SAML Configuration:

• To integrate Drupal as Identity Provider ( IDP ) with Jira, you need the following items:
• Jira should be installed and configured
• Jira Server is HTTPS enabled (optional)
• Admin credentials are set up in Jira
• Valid Jira Server and Data center license

Configure SSO Application in Jira:

• Go to https://www.atlassian.com/software/jira/download and log into your Jira instances as an admin.
• Navigate to the settings menu and click on Manage Apps.

• Click on Find New Apps or Find New Add-ons from the left-hand side of the page.
• Locate Jira SSO / Single Sign On, Jira SAML SSO via search.
• Click Try Free to begin a new trial or Buy Now to purchase a license for Jira SSO / Single Sign On, Jira SAML SSO.

• Enter your information and click Generate license when redirected to MyAtlassian.
• Click on Apply license.

Integrating Drupal with Jira:

• By Uploading Metadata XML file
• Click on Import from Metadata in SSO Endpoints tab
• Select IDP: Import from Metadata File
• Upload metadata file
• Click Import

• Click on the SP Information tab. Here, you can find the Service Provider Information such as SP Entity ID / Issuer, ACS URL, Single Logout URL and Certificate which you will require in Drupal as IDP to configuration.

• In Drupal's Service Provider Setup tab and paste the copied SP Entity ID or Issuer and ACS URL ( copied from the Jira Portals ) in the SP Entity ID or Issuer and ACS URL text-field.

Setting up Jira User Profile attributes:

• If your users are stored in a directory that is Read Only, please check Disable Attribute Mapping in User Profile tab.

• Go to the SSO Endpoint tab, scroll down the page then click on Save Configuration.
• Now, scroll down page and click on Test Configuration button then show information Drupal as IDP.

You have successfully set up Jira as Service Provider and Drupal as Identity Provider.