AWS ALB Authentication Authenticate with AWS
Prevent unauthorized traffic from reaching your Data Center
AWS ALB Authentication Feature
Menu
HTTP header authentication
ID token and user information sent as headers.
- x-amzn-oidc-data:
Contains the user claims from the ID token retrieved during OIDC flow and is signed by the load balancer. - x-amzn-oidc-accesstoken:
Contains the user info retrieved by the OIDC user info endpoint. - x-amzn-oidc-identity:
Subject field of the access token. Can be used to log in the user without the need to decode the tokens.
Predefined setup templates
One click configurations for most prominent IdPs.
- Amazon Cognito
- Okta
- Azure AD
- Google WorkForce
Just in Time Provisioning
Use the login claims forwarded by the AWS ALB
- Just-In-Time: Create & update users with the login claims forwarded by the AWS ALB
- Connect Jira to your IdP to sync users
- LDAP User Provisioning
UserSync Provisioning
- Connect Jira to your IdP to sync users.
- More advanced functionalities than LDAP User Provisioning.
- Schedule Synchronizations: Use cron expressions to schedule periodical directory syncs.
- Make manual updates.
Automatic user deactivation and reactivation for Atlassian
With AWS you can streamline user and license management while keeping your Atlassian applications secure.
- Disable or delete users
- Update users during login
- Automatic re-enablement when the user tries to login again
RESOLUTION IS TRUSTED BY OVER 8,000 CUSTOMERS WORLDWIDE
Top Security on Atlassian with AWS Infrastructure
Use Authentication HTTP headers sent by Amazon AWS Load balancers and IdP for user management and add an extra layer of security.
Verify the source of the header with each access.
- Double-check the IdP
- Double-check the ALB
Flexible OIDC implementation
With AWS you are able to customize your Atlassian security process by choosing what info should be used to log in the user.
- Tokens
- Token claims
Update group memberships
Avoid access chaos by controlling how groups are updated / overridden.
- Filter users to be created according to Atlassian group memberships, i.e Jira-users
- Filter groups to be assigned & removed
