In your Atlassian product, open the in-product marketplace as described in the Atlassian documentation.
Search for "resolution saml" and click "Install" for SAML Single Sign On (SSO) by resolution Reichert Network Solutions GmbH. 


After the installation is complete, click on Manage, then choose Configure. 

Now, you are on the Add-on / app configuration page and the first step of the setup wizard will appear.

install_saml_sso

Step 2: Set up the Gluu Server   

Substep A: Add new IdP or import config

Since version 2.0.0, our add-on offers an intuitive configuration wizard that is presented on first start. In the first step it's possible to import an existing configuration or to start with a fresh configuration. Click on Add new IdP to start the wizard.

Substep B: Choose your SAML Identity Provider

Select Import Metadata from URL as IdP Type, choose a name and click on Next (Description is optional).

Substep C: Copy/Download the SAML Metadata URL

Copy the SAML Metadata-URL from your SAML Single Sign On config page - or, if your Gluu Server has no connection to this instance - save the linked metadata.xml of the SAML Metadata URL and move the saved metadata.xml to your Gluu Server to a location of your choice.

Substep D: Add and configure a Trust Relationship

The rest of Step 2 will be completed in Gluu Server.

At the Gluu Panel, select Add Trust Relationship.

In the Trust Relationship configurations, add the following Service Provider informations:

• Display Name and Description: Choose yourself

• Entity Type: Single SP

• Metadata Location: URI

• Sp Metadata URL: "https://<baseurl>/plugins/servlet/samlsso/metadata"

• SP Logout URL (optional): Leave empty

• Configure Relying Party: Enable the checkbox and select "Configure Relying Party" to make additional configurations. A new window will appear.

As Profile Configuration, please add SAML2SSO and enable the checkbox includeAttributeStatement. For signResponses choose always.

All further configurations are optional. Click on Save as soon as you are done.

Substep C: Release and rename the additional SAML attributes

To release the first attribute Username, select the attribute from the Release additional attributes → gluuPerson list and click on Add.

Repeat the last step for Email, Firstname and Lastname until all attributes are listed in the Released box. Click on Update to save all changes.

Switch to the Configuration → Attributes page.

In the Update Attribute list, scroll down until you find Username. Open the properties via click.

As SAML2 URI replace the current value with the same userid attribute name configured on STEP 2 SUBSTEP D. In this guide the userid is named as samluserid.

At the end of page, click on Update to save the change.

Repeat the last step for Email (mail) → samlemail, Firstname (givenName) → samlfirstname and Lastname (sn) → samllastname.

All changes are done. Please restart your Gluu Server now to get your changes active.

Back to Top

Step 4: Test 

You are now able to perform a test with an authentication tracker, to see if your configuration is working as intended. To start the test, click on the Start test button, copy the displayed link, paste it into a new incognito / private browsing window, and execute a login with Identity Provider. The status of the authentication process is permanently updated in the wizard.

start_test

test_your_settings

Step 5: Enable login redirection  

If the authentication test was successful, it is now safe to activate the redirection on login.

redirect_option

Click on Save & Close. The Add-on is now configured and ready to use.