一、配置JIRA
1.修改/atlassian-jira/WEB-INF/classes/seraph-config.xml
<!--注释以下节点-->
<!--<authenticator class="com.atlassian.jira.security.login.JiraSeraphAuthenticator"/>-->
<!--取消注释以下节点-->
<authenticator class="com.atlassian.jira.security.login.SSOSeraphAuthenticator"/>
2.复制/client/conf/crowd.properties到<JIRA-INSTALLATION/atlassian-jira/WEB-INF/classes下.
编辑/atlassian-jira/WEB-INF/classes/crowd.properties
| Key | Value | |
|---|---|---|
| application.name | jira The application name must match the name that you specified when you defined the application in Crowd (see Step 1 above). | |
| application.password | The password must match the one that you specified when you defined the application in Crowd (see Step 1 above). | |
| crowd.base.url | eg. (http://localhost:8095/crowd/)If your Crowd server’s port is configured differently from the default (i.e. 8095), set it accordingly.crowd.base.url must be the same URL used to access Crowd in your Browser. | |
| session.validationinterval | Set to 0, if you want authentication checks to occur on each request. Otherwise set to the number of minutes between request to validate if the user is logged in or out of the Crowd SSO server. Setting this value to 1 or higher will increase the performance of Crowd’s integration. | |
| 以上信息几乎在文件里边都有，只需修改对应的取值即可 |
二、配置bitbucket
添加/shared/bitbucket.properties
plugin.auth-crowd.sso.enabled=true
一些可选的参数：
| key | value | description |
|---|---|---|
| plugin.auth-crowd.sso.enabled | false | Whether SSO support should be enabled or not. Regardless of this setting SSO authentication will only be activated when the system is connected to a Crowd directory that is configured for SSO. |
| plugin.auth-crowd.sso.config.ttl | 15 | The auth plugin caches the SSO configuration that is retrieved from the remote Crowd server. This setting controls the time to live of that cache.This value is in minutes. |
| plugin.auth-crowd.sso.config.error.wait | 1 | If an error occurs while retrieving the SSO configuration from the remote Crowd server, the system will wait this long before retrying. The wait time between subsequent attempts is incremented exponentially (1s -> 1.5s -> 2.3s -> 3.4s, etc). The wait time is capped at the configured TTL.This value is in seconds. |
| plugin.auth-crowd.sso.http.max.connections | 20 | The maximum number of HTTP connections in the connection pool for communication with the Crowd server. |
| plugin.auth-crowd.sso.http.proxy.host | The name of the proxy server used to transport SOAP traffic to the Crowd server. | |
| plugin.auth-crowd.sso.http.proxy.port | The connection port of the proxy server (must be specified if a proxy host is specified). | |
| plugin.auth-crowd.sso.http.proxy.username | The username used to authenticate with the proxy server (if the proxy server requires authentication). | |
| plugin.auth-crowd.sso.http.proxy.password | The password used to authenticate with the proxy server (if the proxy server requires authentication). | |
| plugin.auth-crowd.sso.http.timeout | 5000 | The HTTP connection timeout used for communication with the Crowd server. A value of zero indicates that there is no connection timeout.This value is in milliseconds. |
| plugin.auth-crowd.sso.socket.timeout | 20000 | The socket timeout. You may wish to override the default value if the latency to the Crowd server is high.This value is in milliseconds. |
| plugin.auth-crowd.sso.session.validationinterval | 3 | The number of minutes to cache authentication validation in the session. If this value is set to 0, each HTTP request will be authenticated with the Crowd server. |
| plugin.auth-crowd.sso.session.lastvalidation | atl.crowd.sso.lastvalidation | The session key to use when storing a Date value of the user’s last authentication. |
| plugin.auth-crowd.sso.session.tokenkey | atl.crowd.sso.tokenkey | The session key to use when storing a String value of the user’s authentication token. |
三、配置confluence
1.修改/confluence/WEB-INF/classes/seraph-config.xml
<!--注释以下节点-->
<!-- <authenticator class="com.atlassian.confluence.user.ConfluenceAuthenticator"/> -->
<!--取消注释以下节点-->
<authenticator class="com.atlassian.confluence.user.ConfluenceCrowdSSOAuthenticator"/>
2.复制/client/conf/crowd.properties到<CONFLUENCE-INSTALLATION/confluence/WEB-INF/classes下.
编辑/confluence/WEB-INF/classes/crowd.properties
| Key | Value |
|---|---|
| application.name | confluence The application name must match the name that you specified when you defined the application in Crowd (see Step 1 above). |
| application.password | The password must match the one that you specified when you defined the application in Crowd (see Step 1 above). |
| crowd.base.url | eg. (http://localhost:8095/crowd/)If your Crowd server’s port is configured differently from the default (i.e. 8095), set it accordingly.crowd.base.url must be the same URL used to access Crowd in your Browser. |
| session.validationinterval | Set to 0, if you want authentication checks to occur on each request. Otherwise set to the number of minutes between request to validate if the user is logged in or out of the Crowd SSO server. Setting this value to 1 or higher will increase the performance of Crowd’s integration. |
| 以上信息几乎在文件里边都有，只需修改对应的取值即可 |
四、配置bamboo
1.编辑\webapp\WEB-INF\classes\seraph-config.xml
<!--注释以下节点-->
<!--<authenticator class="com.atlassian.bamboo.user.authentication.BambooAuthenticator"/>-->
<!--取消注释以下节点-->
<authenticator class="com.atlassian.crowd.integration.seraph.v25.BambooAuthenticator"/>
五、配置fisheye
修改FISHEYE_INST/config.xml
<config>
...
<security allow-anon="false" allow-cru-anon="false">
<built-in>
<signup enabled="true"/>
</built-in>
<crowd sso-enabled="true"/>
<admins>
<system-admins>
<group>confluence-users</group>
</system-admins>
</admins>
<avatar><disabled/></avatar>
<emailVisibility/>
</security>
...
</config>
//以上内容只需添加<crowd sso-enabled="true"/>
六、配置jiraServiceDesk
请参考 一、配置JIRA