Atlassian产品使用单点登陆-SSO

2017-12-13

一、配置JIRA

1.修改/atlassian-jira/WEB-INF/classes/seraph-config.xml

<!--注释以下节点-->
<!--<authenticator class="com.atlassian.jira.security.login.JiraSeraphAuthenticator"/>-->

<!--取消注释以下节点-->
<authenticator class="com.atlassian.jira.security.login.SSOSeraphAuthenticator"/>

2.复制/client/conf/crowd.properties到<JIRA-INSTALLATION/atlassian-jira/WEB-INF/classes下.

编辑/atlassian-jira/WEB-INF/classes/crowd.properties

Key	Value
application.name	jira The application name must match the name that you specified when you defined the application in Crowd (see Step 1 above).
application.password	The password must match the one that you specified when you defined the application in Crowd (see Step 1 above).
crowd.base.url	eg. (http://localhost:8095/crowd/)If your Crowd server’s port is configured differently from the default (i.e. 8095), set it accordingly.crowd.base.url must be the same URL used to access Crowd in your Browser.
session.validationinterval	Set to 0, if you want authentication checks to occur on each request. Otherwise set to the number of minutes between request to validate if the user is logged in or out of the Crowd SSO server. Setting this value to 1 or higher will increase the performance of Crowd’s integration.
	以上信息几乎在文件里边都有，只需修改对应的取值即可

二、配置bitbucket

添加/shared/bitbucket.properties

plugin.auth-crowd.sso.enabled=true

一些可选的参数：

key	value	description
plugin.auth-crowd.sso.enabled	false	Whether SSO support should be enabled or not. Regardless of this setting SSO authentication will only be activated when the system is connected to a Crowd directory that is configured for SSO.
plugin.auth-crowd.sso.config.ttl	15	The auth plugin caches the SSO configuration that is retrieved from the remote Crowd server. This setting controls the time to live of that cache.This value is in minutes.
plugin.auth-crowd.sso.config.error.wait	1	If an error occurs while retrieving the SSO configuration from the remote Crowd server, the system will wait this long before retrying. The wait time between subsequent attempts is incremented exponentially (1s -> 1.5s -> 2.3s -> 3.4s, etc). The wait time is capped at the configured TTL.This value is in seconds.
plugin.auth-crowd.sso.http.max.connections	20	The maximum number of HTTP connections in the connection pool for communication with the Crowd server.
plugin.auth-crowd.sso.http.proxy.host		The name of the proxy server used to transport SOAP traffic to the Crowd server.
plugin.auth-crowd.sso.http.proxy.port		The connection port of the proxy server (must be specified if a proxy host is specified).
plugin.auth-crowd.sso.http.proxy.username		The username used to authenticate with the proxy server (if the proxy server requires authentication).
plugin.auth-crowd.sso.http.proxy.password		The password used to authenticate with the proxy server (if the proxy server requires authentication).
plugin.auth-crowd.sso.http.timeout	5000	The HTTP connection timeout used for communication with the Crowd server. A value of zero indicates that there is no connection timeout.This value is in milliseconds.
plugin.auth-crowd.sso.socket.timeout	20000	The socket timeout. You may wish to override the default value if the latency to the Crowd server is high.This value is in milliseconds.
plugin.auth-crowd.sso.session.validationinterval	3	The number of minutes to cache authentication validation in the session. If this value is set to 0, each HTTP request will be authenticated with the Crowd server.
plugin.auth-crowd.sso.session.lastvalidation	atl.crowd.sso.lastvalidation	The session key to use when storing a Date value of the user’s last authentication.
plugin.auth-crowd.sso.session.tokenkey	atl.crowd.sso.tokenkey	The session key to use when storing a String value of the user’s authentication token.

三、配置confluence

1.修改/confluence/WEB-INF/classes/seraph-config.xml

<!--注释以下节点-->
<!-- <authenticator class="com.atlassian.confluence.user.ConfluenceAuthenticator"/> -->

<!--取消注释以下节点-->
<authenticator class="com.atlassian.confluence.user.ConfluenceCrowdSSOAuthenticator"/>

2.复制/client/conf/crowd.properties到<CONFLUENCE-INSTALLATION/confluence/WEB-INF/classes下.

编辑/confluence/WEB-INF/classes/crowd.properties

Key	Value
application.name	confluence The application name must match the name that you specified when you defined the application in Crowd (see Step 1 above).
application.password	The password must match the one that you specified when you defined the application in Crowd (see Step 1 above).
crowd.base.url	eg. (http://localhost:8095/crowd/)If your Crowd server’s port is configured differently from the default (i.e. 8095), set it accordingly.crowd.base.url must be the same URL used to access Crowd in your Browser.
session.validationinterval	Set to 0, if you want authentication checks to occur on each request. Otherwise set to the number of minutes between request to validate if the user is logged in or out of the Crowd SSO server. Setting this value to 1 or higher will increase the performance of Crowd’s integration.
	以上信息几乎在文件里边都有，只需修改对应的取值即可

四、配置bamboo

1.编辑\webapp\WEB-INF\classes\seraph-config.xml

<!--注释以下节点-->
<!--<authenticator class="com.atlassian.bamboo.user.authentication.BambooAuthenticator"/>-->

<!--取消注释以下节点-->
<authenticator class="com.atlassian.crowd.integration.seraph.v25.BambooAuthenticator"/>

五、配置fisheye

修改FISHEYE_INST/config.xml

<config>
...
    <security allow-anon="false" allow-cru-anon="false">
        <built-in>
                <signup enabled="true"/>
        </built-in>
        <crowd sso-enabled="true"/>
        <admins>
                <system-admins>
                        <group>confluence-users</group>
                </system-admins>
        </admins>
        <avatar><disabled/></avatar>
        <emailVisibility/>
    </security>
...
</config>
//以上内容只需添加<crowd sso-enabled="true"/>

六、配置jiraServiceDesk

请参考 一、配置JIRA