Trying to integrate Confluence server and Azure AD but its failing
Asked by ankit singhal:

Installed Confluence server in Azure via Marketplace template.

Now, we are trying to integrate Confluence server and Azure AD using this article but not able to do it successfully:

<http://www.identityandcloud.com/2017/08/sso-azure-ad-confluence/>

++While trying to run "Atlas-run" results in error:++

\[WARNING\] Some problems were encountered while building the effective model for com.bitium.saml:SAML2Commons:jar:1.1.2

\[WARNING\] 'build.plugins.plugin.version' for org.apache.maven.plugins:maven-source-plugin is missing. @ line 132, column 21

Failed to execute goal com.atlassian.maven.plugins:maven-amps-dispatcher-plugin:6.3.13:run (default-cli) on project SAML2Commons: Couldn't detect an AMPS product to dispatch to -\> \[Help 1\]


Answers:
author: Christian Reichert (resolution)
body: Hi [@ankit singhal](/t5/user/viewprofilepage/user-id/1190145),

sorry I can't help you with the bitium free plugin.

There are however other plugins available in the Marketplace (ranging from free to paid-for), if you want to try a different one.

A good overview: <https://marketplace.atlassian.com/search?query=saml>

Also some of the commercial plugins, like [ours](https://marketplace.atlassian.com/plugins/com.resolution.atlasplugins.samlsso.Confluence/server/overview), are listed on the [Azure Marketplace with a Tutorial](https://docs.microsoft.com/en-us/azure/active-directory/active-directory-saas-samlssoconfluence-tutorial) - that has the advantage that you would not need the Azure AD Premium licenses to use it. As it's no longer a custom SAML app but a pre-defined \& listed one (which also works in the free tier of Azure AD).

Hope this provides you with an alternative in case you don't get the above solved.

Cheers,  
Christian

Full disclosure: I work for a Marketplace Vendor - <https://marketplace.atlassian.com/vendors/1210947/resolution-reichert-network-solutions-gmbh>

comments: author: ankit singhal
body: Thanks Christian!

I tried the plug-in that you have suggested and its failing with this error message:

***SAML Single Sign On failed - Atlassian Confluence Handling SAML-message failed: The user was not found***


author: Christian Reichert (resolution)
body: [@ankit singhal](/t5/user/viewprofilepage/user-id/1190145),

Looks like the plugin doesn't find a matching User in the internal Confluence Database. So you either have not turned User creation on to create User if he doesn't exist or the Username transferred from Azure is not matching the Username in Confluence - so you may have to turn on UserId Transformation (for example dropping a @domain.com from the Username).

Why don't you book a quick screenshare session via <https://resolution.de/go/calendly> and one of our engineers can help you troubleshoot this.

Alternatively you can also open a normal support request via <https://resolution.de/go/support>

<br />

Cheers,  
Christian


author: ankit singhal
body: Thanks for the quick response, Christian!

Could you tell me **how to turn on UserId Transformation (for example dropping a @domain.com from the Username).**

![User.png](https://community.atlassian.com/t5/image/serverpage/image-id/15923iA208568E1365BA64/image-size/large?v=v2&px=999 "User.png")


author: Christian Eitel
body: Hi [@ankit singhal](/t5/user/viewprofilepage/user-id/1190145),

to turn on the UserID Transformation for dropping the domain part (@domain.com) from the Username (userid):

1. Goto SAML Single Sign On configuration page (https://\<baseurl\>/plugins/servlet/samlsso/admin) -\> Identity Providers -\> User ID transformation
2. Disable the checkbox **The IdP's NameID attribute matches the user IDs in Jira**. It should open further configuration fields.
3. In the **Userid Transformation** field use   
   Replace: "(.\*)@.\*" with: "$1"
4. In the **Test Input** field below, add your Username. Check that the entered username is correctly transformed to the **Output**.
5. Save the configuration page and try it again.

Here is a full screenshot of the configurations:

![UserId transformation dropping domain part.png](https://community.atlassian.com/t5/image/serverpage/image-id/15934iEB65200E88CAA826/image-dimensions/547x333?v=v2 "UserId transformation dropping domain part.png")

I hope this helps.

Best Regards,

Christian


author: ankit singhal
body: Thank you, Christian :)

Its working now.


author: Emmanuel Alejandro Mateo Caja
body: Thanks [@ankit singhal](/t5/user/viewprofilepage/user-id/1190145) . It helps me when I received this error:

SAML-Login failed: User was not found by ATTR_NAME


Tags: active-directory

azure