Download And Installation

• Log into your atlassian instance as admin.
• Navigate to the settings menu and Click Manage Apps.
• Click Find new apps or Find new add-ons from the left-hand side of the page.
• Locate Api Token/OAuth Authentication app.
• Click Try free to begin a new trial or Buy now to purchase a license.
• Enter your information and click Generate license when redirected to MyAtlassian.
• Click Apply license.

Step 1: Configure Azure AD server:

• Sign in to Azure portal. Click on App Services and go to Manage Azure Active Directory.

• In the left-hand navigation pane, click the App registrations service, and click New registration.

• When the Create page appears, enter your application's registration information. Enter the Your Application's Base URL as callback URL. When finished, click Register.

• Azure AD assigns a unique Application ID to your application. Copy Application ID and the Directory ID , this will be your Client ID and Tenent ID.

• Go to Certificates and Secrets from the left navigaton pane and click on New Client Secret. Enter description and expiration time and click on ADD option.

• Copy value. This will be your Secret key.

Step 2: Fetch Access token through POSTMAN

• Open the Postman Application (Here is the link to download Postman Application).
• Go to Authorization tab.
• From the dropdown select type as OAuth 2.0 and  click on Get access token.
• Add the following information from the table below.
• Postman starts the authentication flow and prompts you to use the access token.
• Select Add token to the header.

Field	Value
Grant type	Authorization Code or Client Credentials
Callback URL	Enter your application's base URL if you dont have a callback URL
Auth URL	https://login.microsoftonline.com/{TenantID}/oauth2/v2.0/authorize
Access token URL	https://login.microsoftonline.com/{TenantID}/oauth2/token"
Client ID	Enter the Azure AD Client ID
Client secret	Enter the Azure AD Client secret
Scope	User.Read
Client Authentication	Send as Basic Auth Header

• Copy the Access Token or click on Use Token.

A sample access token from Azure AD Provider looks like this.

e8ec210628306b1df26ff61e6b9b3195814a2d79d38a2c7c1dc5836f6ddd7143

Step 3: Fetch Username through Azure AD:

• Choose the method type as "GET".
• Enter the interoception Endpoint from the plugin to fetch the username in the Request URL. For Azure AD it is "https://graph.microsoft.com/v1.0/me".
• Go to the Authorization tab select the Bearer Token and enter the access token here.
• Add the header "content-type: application/json" and click on Send.

Request:

     curl
                         -X GET
                         -H "Authorization: Bearer <Access Token>"
                         -H "Content-type: application/json"
                         https://graph.microsoft.com/v1.0/me
                    

Copy the attribute value against the username, you will need to configure it in plugin. In this example, the value is "givenName".

Configure the Rest API plugin:

Step 1: Enable Rest API Authentication:

• After installing the app, navigate to the Global Settings tab.
• Here you will have to Enable the Authentication through Enable REST API Authentication and click on Save.
• Go to the OAuth/OIDC tab and in the dropdown provided select Azure AD as the OAuth provider.
• Enter the attribute value against which we received the username in the Postman response.
• Save the settings.

Step 2: Disable Basic Authentication:

• Disabling this will restrict all the REST API call made using Basic Authentication.

Test REST API using access token:

• Call any REST API. Include the access token in the Authorization header. Here’s an example of fetching content from Confluence.
• Go to the Postman application select method type as GET and enter the Request URL. For eg. http://{Confluence_Base_URL}/confluence/rest/api/content/
• In the Authorization tab select type as Bearer Token.

 

• In the Header tab add the header “content-type: application/json and send the request.

Request:

     curl
                             -X GET
                             -H "Authorization: Bearer <Access Token>"
                             -H "Content-type: application/json"
                             http://{confluence_base_url}/confluence/rest/api/content/
                    

• This will show the content in Confluence and will return the status 200.
• If the token is invalid or missing, the call will return a 401 Unauthorized response

Additional Resources

• Rest API Authentication Methods?
• Azure AD as OAuth Provider/OpenID Connect
• Frequently Asked Questions (FAQs)