Step 1: Install the Add-on 

• Click Add-ons under Bamboo Administration on the top right corner of your Bamboo interface. Then, choose Find new add-ons and you will be taken to Atlassian Marketplace. Search for SAML SSO and click on Free Trial to install. 

After installing free trial, click on Manage, then choose Configure. Now, you are on the plugin configuration page. 

Back to Top

Step 2: Setup the Azure AD

Step 2 will be completed in Azure AD. 

Substep A : Select your directory and start application dialog

• Go to https://manage.windowsazure.com and login with your credentials.

• Select Active Directory on the left navigation panel, and select the directory that you want to use with SAML Single Sign On.

• Click on APPLICATIONS, then click on ADD to start a new application dialogue

Substep B: Add a new application

• Click on Add an application from the gallery.

• Select Custom on the left navigation panel, and click Add an unlisted application my organization is using.

• Then, fill in a name of your choice, e.g.. SAML Single Sign On in the NAME field.

• Click on the Finish button at the bottom to add the application to your directory.

Back to Top

Substep C: Configure the new application

• Click on Configure Single Sign On. In the Pop-up window choose select Microsoft Azure AD Single Sign-On, then click on Next.

• In the IDENTIFIER and REPLY URL fields please fill in your Bitbucket SAML Single Sign On URL : https://<your-bitbucket>/plugins/servlet/samlsso. (e.g. https://bitbucket.lab.resolution.de/plugins/servlet/samlsso)

• Click Next.
  
  
  
  

• Click on Download Metadata (XML) to download the FederationMetadata.xml. We will configure the SAML Single Sign On with the Metadata from Azure AD in Step F.

• Check the Checkbox Confirm that you have configured... .

• Click on Next.

• Fill in a NOTIFICATION E-MAIL for which you want to get notifications for this application.

• Click Finish to complete the application configuration. Then you come back to the overview page of SAML Single Sign On and continue with Substep D to grant user access. 

Substep D: Grant access to users

• Click on USERS AND GROUPS and select All Users in the SHOW drop down field. Then click on the tick on the right side to show all users. 

• Select the user which you want to grant access for this application, and click on ASSIGN at the bottom.

• Then, click on YES  at the bottom of the black pop-up window to confirm to enable access for selected users.

• Finally, review “Access” status to see if the user has been successfully granted access to application now.

Back to Top

Step 4: Test 

You are now able to perform a test with an authentication tracker, to see if your configuration is working as intended. To start the test, click on the Start test button, copy the displayed link, paste it into a new incognito / private browsing window, and execute a login with Identity Provider. The status of the authentication process is permanently update in the wizard.

Step 5: Enable login redirection  

If the authentication test was successful, it is now safe to activate the redirection on login.

Click on Save & Close. The Add-on is now configured and ready to use.