...
If all went OK, either click on Back to directory list or just click User Directories from left menu and then click Synchronize to initiate first synchronization.
...
And there select the group name from the list that all users belong to who need access. For GÉANT 4 Phase 1 that was named GN4-1_PP (as in Project Participants).
SAML login
Installing SAML plugin
SAML login is based on SAML 2.0 Single Sign-On for Jira plugin by Bitium, Inc. Search for it in the marketplace and install it.
At the time of writing the plugin is at version v 1.0.3 which does not have all patches created during GN4 phase 1, but the essentials to allow federated login.
...
| Code Block |
|---|
Login URL: https://login.terena.org/wayf/saml2/idp/SSOService.php UID Attribute: TAL:federated_user_id X.509 Certificate: -----BEGIN CERTIFICATE----- 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 -----END CERTIFICATE----- Entity ID: https://login.terena.org/wayf/saml2/idp/metadata.php Default Group for Auto-created Users: jira-software-users |
| Note |
|---|
IMPORTANT: Do not check Force SSO login nor Auto-create User. This allows login from local users too and will authorize only those users that exist in the Grouper LDAP. The default group is set just in case, as autocreated admin users are not that good idea. |
...