Uploaded image for project: 'Jira Data Center'
  1. Jira Data Center
  2. JRASERVER-71288

SAML authentication assertions and responses should be signed

XMLWordPrintable

    • 2
    • 4
    • We collect Jira feedback from various sources, and we evaluate what we've collected when planning our product roadmap. To understand how this piece of feedback will be reviewed, see our Implementation of New Features Policy.

      Some Identity providers like one login expect authentication requests/responses to be signed by Jira citing security vulnerability. This results in SAML response to throw errors

      <samlp:StatusMessage>Signature required</samlp:StatusMessage>

          Form Name

            [JRASERVER-71288] SAML authentication assertions and responses should be signed

            Rilwan Ahmed added a comment -

            Any progress on this request ?

            Rilwan Ahmed added a comment - Any progress on this request ?

            Dhiraj Kumar Mishra added a comment -

            I am wondering why Atlassian is taking this long (4 years) to implement such a small feature even though its about security of the tool.

            Dhiraj Kumar Mishra added a comment - I am wondering why Atlassian is taking this long (4 years) to implement such a small feature even though its about security of the tool.

            N added a comment -

            Please permit SAML requests to be digitally signed for Atlassian products.

            SAML request signing is a part of the SAML standard; and not having it opens a security hole that can be easily fixed by enabling SAML request signing.

            N added a comment - Please permit SAML requests to be digitally signed for Atlassian products. SAML request signing is a part of the SAML standard; and not having it opens a security hole that can be easily fixed by enabling SAML request signing.

            sthanu added a comment -

            we really love to see this feature enabled in Jira

            sthanu added a comment - we really love to see this feature enabled in Jira

              Unassigned Unassigned
              svenkatachari shrivatsaa
              Votes:
              32 Vote for this issue
              Watchers:
              27 Start watching this issue

                Created:
                Updated: