• Our product teams collect and evaluate feedback from a number of different sources. To learn more about how we use customer feedback in the planning process, check out our new feature policy.

      Currently, Crowd Apache integration doesn't support SSO.

            [CWD-1440] Support SSO for Apache Integration

            Adrian Hempel [Atlassian] added a comment - Working on it

            If the Apache 2.0 connector can be built on Windows in the near future, that would be gold.

            Brett Hillebrand added a comment - If the Apache 2.0 connector can be built on Windows in the near future, that would be gold.

            David O'Flynn [Atlassian] added a comment - https://plugins.atlassian.com/plugin/details/33300 Happy Christmas Brett!

            early christmas present?

            And thanks for the heads up, was goona do some re-config on our Atlassian setup, but I'll wait until the new crowd gets released.

            Brett Hillebrand added a comment - early christmas present? And thanks for the heads up, was goona do some re-config on our Atlassian setup, but I'll wait until the new crowd gets released.

            Hi Brett,

            Less than 24 hours to wait

            Cheers,
            Dave.

            David O'Flynn [Atlassian] added a comment - Hi Brett, Less than 24 hours to wait Cheers, Dave.

            Oh Dug, scrub that. I see its integrated into v2.1 (yet to be released)

            Can't wait guys

            Brett Hillebrand added a comment - Oh Dug, scrub that. I see its integrated into v2.1 (yet to be released) Can't wait guys

            Noticed this was changed to resolved, with no comment.

            Seeing as there are a large number of people watching this, can an atlassian please post a link to how this can be achieved?

            Brett Hillebrand added a comment - Noticed this was changed to resolved, with no comment. Seeing as there are a large number of people watching this, can an atlassian please post a link to how this can be achieved?

            Jim Browne added a comment -

            I've taken the resources referenced in this issue and have combined them into one package: http://github.com/jimbrowne/apache-crowd-cookie. I found patching the on-disk version of Atlassian's libraries to be a distraction, so I renamed the module to CrowdCookieAuth and made it self-contained. I also added functionality to the sample login.cgi to handle logging out as well as redirection after login in addition to pulling code into the CGI to avoid patching Atlassian's libraries.

            I hope that the status change to "short term roadmap" means Atlassian will incorporate these changes or otherwise directly support cookie-based authentication in Apache.

            My preferred solution is a binary Apache module and if I have the time in the future I'll modify mod_auth_openid to support Crowd as I prefer the all-in-one approach (i.e. no need for a login.cgi)

            Jim Browne added a comment - I've taken the resources referenced in this issue and have combined them into one package: http://github.com/jimbrowne/apache-crowd-cookie . I found patching the on-disk version of Atlassian's libraries to be a distraction, so I renamed the module to CrowdCookieAuth and made it self-contained. I also added functionality to the sample login.cgi to handle logging out as well as redirection after login in addition to pulling code into the CGI to avoid patching Atlassian's libraries. I hope that the status change to "short term roadmap" means Atlassian will incorporate these changes or otherwise directly support cookie-based authentication in Apache. My preferred solution is a binary Apache module and if I have the time in the future I'll modify mod_auth_openid to support Crowd as I prefer the all-in-one approach (i.e. no need for a login.cgi)

            With the arrival of the CrowdID OpenID server it's now also possible to use mod_auth_openid for Apache to get SSO integration with Crowd.

            Please make sure to check the comment I left in the CrowdID install page about setting the OpenID endpoint.

            Michiel Trimpe added a comment - With the arrival of the CrowdID OpenID server it's now also possible to use mod_auth_openid for Apache to get SSO integration with Crowd. Please make sure to check the comment I left in the CrowdID install page about setting the OpenID endpoint .

            ingard added a comment -

            ingard added a comment - why not simply include this: http://confluence.atlassian.com/display/CROWDEXT/Atlassian+Crowd+login+screen+using+perl ?

            Thanks, I added this module to the doc in the requisites list.

            Gustavo N Fernandes added a comment - Thanks, I added this module to the doc in the requisites list.

            Matt Block added a comment -

            I could not find a way to comment on the link above, so I will comment here and hope it makes it to the right place. The above link is missing an additional required perl Module. In addition to everything required by the apache connector from Atlassian, it also requires the URI module. If you don't have this module, everything will look fine until you go to build the Apache-CrowdAuth module and then it will fail saying the Atlassian::Crowd module isn't installed when really it's the URI module.

            Matt Block added a comment - I could not find a way to comment on the link above, so I will comment here and hope it makes it to the right place. The above link is missing an additional required perl Module. In addition to everything required by the apache connector from Atlassian, it also requires the URI module. If you don't have this module, everything will look fine until you go to build the Apache-CrowdAuth module and then it will fail saying the Atlassian::Crowd module isn't installed when really it's the URI module.

            Please refer to http://opensource.sourcesense.com/confluence/display/CPL/Crowd+Apache+Connector for the implementation of this feature.

            Gustavo N Fernandes added a comment - Please refer to http://opensource.sourcesense.com/confluence/display/CPL/Crowd+Apache+Connector for the implementation of this feature.

            If you are looking at adding this functionality yourself, what you would probably need to do would be to add an Apache Access handler that read in the Crowd SSO cookie and authenticated it against the Crowd server using the SOAP API. This page in the Crowd docs might be a good starting point.

            Renan Battaglin added a comment - If you are looking at adding this functionality yourself, what you would probably need to do would be to add an Apache Access handler that read in the Crowd SSO cookie and authenticated it against the Crowd server using the SOAP API. This page in the Crowd docs might be a good starting point.

              Unassigned Unassigned
              rbattaglin Renan Battaglin
              Votes:
              78 Vote for this issue
              Watchers:
              58 Start watching this issue

                Created:
                Updated:
                Resolved: