Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

 


Step-by-step guide

  1. Obtain EasySSO from the Atlassian Marketplace.
     

  2. If you have no Internet connectivity Obtain an EasySSO license from the Atlassian Marketplace and install the license via the Universal Plugin Manager (UPM).

    If you have Internet connectivity: In the UPM you will be asked for your email and password to the Atlassian Marketplace. Enter these and the EasySSO license will be added automatically.
     

  3. Once installed click Configure in UPM to proceed to the configuration wizard. You can also arrive to this screen by clicking EasySSO link under "TechTime Add-Ons" section usually located in the left panel of the Admin screen.
     
  4. Follow the link on the screen to get the IOPLEX Jespa library and install it. See the screenshot on the right.

    Expand
    titleDetailed instructions
    • Go to Downloads section of IOPLEX Jespa website
    • Take .zip distribution
    • upload .zip to EasySSO config screen "IOPLEX Jespa Licensing" tab

    Read more about the role of IOPLEX Jespa license.

The EasySSO configure screen only has 3 fields for you to fill.

5. Read the IOPLEX EULA.

Warning

Continuing past this point signifies your acceptance of the terms of IOPLEX EULA.

6. Go to "EasySSO Configuration" tab

7. Fill in your domain name. If you don't know what your domain is it is better to consult your Active Directory Admin or you can use the method described in our "Determining AD forest" FAQ page. One of the values returned will be the domain name ("Dom Name").

8. Obtain a  computer Active Directory account with a password in your Domain from your Active Directory administrator.

The account can be created (also known as "pre-staged") using standard Microsoft tools as described in this Technet article.
Password can be set from the command line using "net user <username$> <password> /domain" command described in this Technet article.

This is the most important part of the configuration. If this takes more time than expected, you can save the values already entered on this screen (if any) and return to this screen later.

Please read IOPLEX Jespa Operators Manual about these (page 8). The manual is available for download from the link from within EasySSO configuration screen and About screen once you've uploaded IOPLEX Jespa .zip package.

You will need a computer account with a password.

Since creating this requires one to be logged in as an Active Directory administrator - we cannot automate this task, please work with your Active Directory administrators on this.

Please pass IOPLEX Jespa .zip package to them – it contains the Operators Manual and the necessary command-line scripts to help them accomplish this task.

IOPLEX Jespa package contains two .vbs scripts – one script is a full wizard that will create the computer account and set the password - you will need to be an Active Directory administrator to be able to run these scripts. The other one can be used by your domain administrators to set a password on computer account if they create it manually using default tools from Microsoft.

If you are an Active Directory administrator yourself – we have created a link for you called 'SetComputerPassword.vbs script' on the EasySSO Configuration tab (next to the password field)


Expand
titleMore information about Computer Accounts here

Why do I need a new computer account?   

Can I use a user account?

Can I use a service account?

Can I use the account of the same server/VM/box that JIRA is installed on

9. Proxies: If you are running behind a reverse proxy e.g Apache - see Configuring Apache as a reverse proxy for EasySSO in our FAQ for the additional config that needs to be done to these front-facing web servers. If you are using NGINX - see How to Configure NGINX in our FAQ. If you are using IIS - see Configuring IIS as reverse proxy in our FAQ


10. If you are installing EasySSO into multiple Atlassian applications, that are integrated via Application Links you will need to configure mutual filtering between applications as NTLM/Kerberos is not supported when building or verifying the application link.

This can be done either using   IP Filtering  or  User-Agent filtering  to disable NTLM/Kerberos when for example JIRA contacts Confluence and vice versa. User-Agent filtering seems to be preferred by most customers.  

In our FAQ we specifically answer the question "My Application Links don't work after installing EasySSO?" with instructions on how to configure User-Agent filtering.

 

11. Browser Setting: For the duration of your testing - change the browser settings according to these instructions.

 

12. Take a look at our FAQs page to see if there are any scenarios that apply to you which could make your life easier.

 

13. If you want to configure EasySSO further please read the Advanced configuration for EasySSO instructions. Here you will find information on:

a) Specifying log levels and log file locations

b) the AD site configuration

c) setting the canonical form of your user accounts

 

Pair EasySSO with User Management for JIRA and Confluence. Visit the  Atlassian Marketplace   for more information.

Page Details Macro
titleHow to Configure EasySSO with NTLM/Kererbos

 

Document Macro
summaryHow to Configure Guide for EasySSO with NTLM/Kererbos configuration
iconfile
titleEasySSO with NTLM/Kererbos configuration

 

 

Purchasing Macro
linkhttps://marketplace.atlassian.com/search?q=%22Easy+SSO%22
titlePurchase from the Marketplace

EasySSO for JIRA, Confluence, Bamboo, Bitbucket and Fisheye/Crucible 

   

Documentation Area Macro
pageTECHTIME:EasySSO
titleEasySSO articles

 

Excerpt
hiddentrue

How to configure EasySSO - step-by-step guide