The comment from Juhani Gurney is helpful.
Can you you or someone elaborate on the "We needed to to a slight modification to the Crowd Authenticators for Confluence and Jira so that they redirect to Crowd for login instead of showing the Confluence/Jira login screen" part?
I assume we need to update the "login.url" property in the seraph-config.xml file of confluence to point to our shib protected crowd server, but I am unsure what format for the URL to tell Crowd where to redirect back to. /crowd/login.action?redirectTo=https://confluence or something?? I can't seem to stumble upon it.
Thanks!
There appears to be a newer version (that claims to work with 2.7) located at https://github.com/Eduix/crowd-shibboleth-module. I posted my URL answer there, but in case it get removed I will post here. I had to check out the login button at the nordu site itself to figure this out.
You set the login.url property in the seraph-config.xml file to http://YourServerName:8095/crowd/plugins/servlet/ssocookie?redirectTo=${originalurl}