Issue Details (XML | Word | Printable)

Key: JRA-14866
Type: Improvement Improvement
Status: Open Open
Priority: Major Major
Assignee: Unassigned
Reporter: Tal Abramson
Votes: 1
Watchers: 2
Operations

If you were logged in you would be able to see more operations.
JIRA

Implement login using google Authentication

Created: 24/Apr/08 12:54 AM   Updated: 30/Apr/08 12:38 AM
Component/s: Security, User Management
Affects Version/s: 3.12.2
Fix Version/s: None

Time Tracking:
Not Specified

Environment: War on tomcat 5.5

Participants: Anton Mazkovoi [Atlassian] and Tal Abramson
Since last comment: 22 weeks, 6 days ago
Labels:


 Description  « Hide
We are a small company , and we are using Google for mail , calender etc ...
For now we are using open ldap to authenticate users for our Jira
But we would like to have a sort of SSO , using google users and password
It will be great to be able to configure Jira , to check the users password against Goolge

Even some instructions , how you did the ldap integration , would be fine



 All   Comments   Work Log   Change History      Sort Order: Ascending order - Click to sort in descending order
Anton Mazkovoi [Atlassian] added a comment - 27/Apr/08 08:11 PM
Hi Tal,

It is possible to integrate JIRA with a Single Sign On solution. JIRA uses seraph for authentication, and it is possible to write a Seraph authenticator than authenticates against an SSO system:
http://opensource.atlassian.com/seraph/sso.html

We will leave this issue open to see how many other users are interested in authenticating against Google. For more information on the way new feature and improvement requests are scheduled, please see:
http://confluence.atlassian.com/display/DEV/Implementation+of+New+Features+and+Improvements

Cheers,
Anton


Tal Abramson added a comment - 29/Apr/08 12:19 AM
How can i make this work side by side with the standard login method? (same as when ldap is enabled)
So if the user have a local password , it is used , and if not it will go and check the one in google ...

Anton Mazkovoi [Atlassian] added a comment - 29/Apr/08 11:26 PM
Hi Tal,

You will need to make a delegating Autheticator. So the authenticator can try a remote login (i.e. via google) and if it does not work try delegating the login to the standard delegator.

Cheers,
Anton


Tal Abramson added a comment - 30/Apr/08 12:38 AM
I have started to work on something else
a CredentialsProvider same as LDAPCredentialsProvider , which i will set in the osuser.xml
As all i want is to approve logiin in with the google password
i think this probably will be easier to implement
i will share the final work in here if it will work