Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

...

Documentation

Info

The configuration page has been revised in the last versions and contains more options now. These options are described within the configuration page itself

...

SettingDescriptionExample
IdP URLURL on the Identity Provider where the SAML authentication requests are sent to.https://adfs.example.com/adfs/ls/
Default redirect URL

Relative URL on JIRA or Confluence to redirect to after successful login if no specific URL was called. This is usually the case if the samlsso-Servlet is opened directly.

This value is usually just / if Confluence/JIRA is running in the root context.

/
Login page URLIf the SAML login fails, a link to the username/password login page is displayed in the error page. For Confluence, this is usually /login.action, for JIRA /login.jsp/login.jsp
Override Login URLIf this box is checked, JIRA/Confluence redirects to the samlsso-Servlet (which redirects to ADFS) instead of the login page. If this is box is not checked, single sign on only works if the samlsso-Servlet is called directly at https://<confluence/jira-url>/plugins/servlet/samlsso. 
IdP Certificate

Paste the BASE64-encoded Token Signing Certificate here.

Warning

If you leave this field empty, the SAML response signature validation is disabled. This can be useful for testing and troubleshooting, but it's strongly recommend to enable the validation. Otherwise, attackers could gain access by sending fake SAML-responses.

After clicking Send, the certificate is shown in the field below in readable form.

 

...