Search
  • Julie Gums

How can I activate SSO authentication & allow the standard login for smaller groups?

Updated: Aug 6


Question

How can I activate SSO authentication & allow the standard login for smaller groups?


What are the options?

There are multiple ways to do that. One of them is to add ?nosso to the link. You can also use the option identity selection page. The best solution depends on how many local users you'll have versus Single Sign-On users. If you need that for a small group of people, then using a special URL may be the best way. If you add ?nosso to the normal login URL of the product, then it will show you the normal login prompt, assuming you haven't disabled that in the configuration.


?Nosso

For bypassing the Single Sign On, please use one of the following URLs:

Jira: https://<jira-baseurl>/login.jsp?nosso

Confluence: https://<confluence-baseurl>/login.action?nosso

Bitbucket: https://<bitbucket-baseurl>/login?nosso

Bamboo
Bamboo 5: https://<bamboo-baseurl>/userlogin!default.action?nosso
Bamboo 6 and later: https://<bamboo-baseurl>/userlogin!doDefault.action?nosso

Fisheye-Crucible: https://<fisheye-baseurl>/login?nosso

Identity Selection page

If the "IdP Selection Page" is selected as the IdP Selection Method, this will present the users a page, where they can choose the desired IdP to log in with or to log in with no SSO using their local usernames/passwords.


This IdP Selection Page's template could be modified as per your needs, from the Page Template tab, where you can also remove the part of having the option to log in with local username and password.


If the user has logged out and re-logged in, they will be presented again with the IdP Selection Page, but their last IdP option would be preserved, and by default, they would be logged in again using the same IdP after 3 seconds.

The "3 seconds" duration is adjustable through the IdP Selection Page template, and you could even remove it to disable the auto-forward to the same IdP.


You can also attach the "idp" parameter to your URL, which would redirect the user to the configured identity provider. The IdP Selection Page also works with this parameter. As example, if you configured two Identity Providers, you can access them through: https://<baseURL>/plugins/servlet/samlsso?idp=1
https://<baseURL>/plugins/servlet/samlsso?idp=2
platinum_low-res.png

Newsletter      Support      Marketplace      Documentation      Imprint      Privacy Policy