By: Cole Mietzner user 21 Jul 2017 at 2:09 p.m. CDT

4 Responses
Cole Mietzner gravatar
I am trying to setup SAML with Jira. However Jira does not provide a metadata file. The only thing jira provides is a SP Entity ID and SP Assertion Consumer Service URL. Has anyone gotten Jira Cloud to work with Gluu? What am I missing? ![enter image description here](https://c1.staticflickr.com/5/4316/35900760412_58dd03dc2f_b.jpg "enter image title here")

By Mohib Zico staff 21 Jul 2017 at 2:36 p.m. CDT

Mohib Zico gravatar
Personally I never tried ( may be someone else might help here ). However.. can suggest some points... - Identity provider EntityID should be: https://[hostname]/idp/shibboleth - Identity provider SSO URL: SingleSignOn URI [ available in your Gluu Server SAML metadata ] - Public x509 certificate: The 'shibIDP.crt' of your Gluu server ( location: /etc/certs/ inside Gluu-Server container ) As metadata is not supplied by Jira, you might need to write metadata to create Trust Relationship.

By Aliaksandr Samuseu staff 21 Jul 2017 at 2:37 p.m. CDT

Aliaksandr Samuseu gravatar
Hi, Cole. That's a question which belongs to Jira's support forums, IMO. But just for your information, knowing entityid and the assertion consumer endpoint should be enough to construct metadata by yourself. You can take some other's SP metadata, remove SP-related stuff from there, basically leaving only some headers, and put your urls and cert in it. I'm sure you can google for more such guides, if needed. Also note that you may need to know more details, like what attributes to release, type of nameid to use etc.

By Michael Schwartz Account Admin 21 Jul 2017 at 2:39 p.m. CDT

Michael Schwartz gravatar
If you want to see the SAML metadata for your Gluu Server: `https://[hostname]/idp/shibboleth` Also, don't forget that you'll need to create metadata for Jira if they don't provide it, and create a Gluu Server Trust Relationship, releasing the attributes Jira requires.

By Mohib Zico staff 26 Jul 2017 at 7:31 a.m. CDT

Mohib Zico gravatar
Hello Cole, It's been idle for some time; do you want to keep this ticket open?