Solution

Description

The Client Certificate Authentication solution is a JAR made for Atlassian JIRA, Confluence, Bamboo and Bitbucket (Server) / Stash. 

When users try to access any one of the Atlassian tools, the browser will prompt them to select their certificate. Users will then be automatically logged into the application if their username already has an account.

To enable this integration, you will need to have the Atlassian application integrated with Apache via a reverse proxy.

Introduction

This document describes using client certificates as an authentication mechanism in JIRA. In the terms of smart cards, certificates are still passes from the smart card into the browser via the smart card client.

The method described here will allow JIRA to use client certificates for authentication without a password.

Notes

• If you find yourself without a valid certificate and locked out of JIRA, you may need to effectively undo all the plugin setup to log in with a regular JIRA account again
• If your certificate contains more than one identify, the first valid identify will be used
• The plugin assumes that the user ID is contained in the CN entry
  • If that is not the case in your certificate, a minor code customization will be necessary