sso with confluence,crucible and fisheye
Asked by mai mai:

software:atlassian-crowd-2.4.0.tar.gz, atlassian-confluence-4.2.11-x64.bin , crucible-2.10.1.zip(with fisheye)

operating system: linux redhat 4

jdk: jdk1.6 + database: mysql 5.5

Reference to the following links:

<https://confluence.atlassian.com/display/CROWD024/Integrating+Crowd+with+Atlassian+Confluence>

<https://confluence.atlassian.com/display/CROWD024/Integrating+Crowd+with+Atlassian+Crucible>

<https://confluence.atlassian.com/display/CROWD024/Integrating+Crowd+with+Atlassian+FishEye>

Use the Atlassian import users from confluence in crowd. So, users have the same username and password.

Users and groups can be synchronized. Try logging in to crowd, confluence and crucible is ok.

But single sign-on is failed.


Answers:
author: Tiago Comasseto
body: Hi there,

The SSO configuration sometimes is tricky, but there are some key points that I'd suggest you to check, they are the following:

1. Ensure that the URLs being used to access each application and the [SSO Domain](http://confluence.atlassian.com/display/CROWD/Domain) value stored in Crowd are valid and match the pattern;  
2. Ensure that all applications are using the Crowd authenticator at their **WEB-INF/classes/seraph-config.xml** files;  
3. Ensure that the Directories that are assigned to each application in Crowd, If more than one, are in the exact same [order](http://confluence.atlassian.com/display/CROWD/Specifying+the+Directory+Order+for+an+Application);  
4. If there are proxy servers being used between Crowd and the applications, make sure to add their IP addresses to the[Trusted Proxy Servers](http://confluence.atlassian.com/display/CROWD/Configuring+Trusted+Proxy+Servers) list in Crowd.

I hope this information has helped.

Cheers

comments: author: William Crighton [CCC]
body: Question for Tiago Comasseto \[Atlassian\]:

I cannot find a seraph-config.xml file in my 2.10.4 Crucible install. The only 'SSO' option is under Administration/Authentication and it is a radio button option 'SSO Enabled true/false'. I'd attach a screenshot but I can't.

There is a seraph-config.xml under WEB-INF/classes on JIRA and Confluence, but I cannot find any file with the word 'seraph' in it on my Crucible install.

-wc


author: Tiago Comasseto
body: Hi Wiilliam,

You are right, in Fisheye/Crucible we don't have a seraph-config.xml file. The SSO configuration is set under UI. See details [here](https://confluence.atlassian.com/display/CROWD/Integrating+Crowd+with+Atlassian+FishEye#IntegratingCrowdwithAtlassianFishEye-2.2ConfigureFishEyetouseCrowd%27sauthenticator).

I hope this helpes.

Cheers


author: William Crighton [CCC]
body: Thank you very much for the reply. Unfortunately the link you provided didn't help - it looked like it would, our crowd URL didn't have 'services/' in it, but adding that and restarting crucible didn't help. We can see our crowd groups and have to supply our crowd password to authenticate, but single sign on isn't working. Any ideas? Or should we just create a support request?


author: Tiago Comasseto
body: William, since it seems that we'll need to further investigate this case, I believe the best opition would be create a support request. This way we can analyse your logs and understand what's wrong.

Cheers


author: William Crighton [CCC]
body: beat on it a little more and realized we were being stupid and, well, enough said. The solution was to set our Crowd URL with /crowd/services/

Thanks for the fast replies, helped us out. Cheers!

-wc


author: William Crighton [CCC]
body: Question for Tiago Comasseto \[Atlassian\]:

I cannot find a seraph-config.xml file in my 2.10.4 Crucible install. The only 'SSO' option is under Administration/Authentication and it is a radio button option 'SSO Enabled true/false'. I'd attach a screenshot but I can't.

There is a seraph-config.xml under WEB-INF/classes on JIRA and Confluence, but I cannot find any file with the word 'seraph' in it on my Crucible install.

-wc


author: William Zanchet [Atlassian]
body: Hi, I would suggest to you, to check the Applications URLs

1. Ensure that the [SSO Domain](http://confluence.atlassian.com/display/CROWD/Domain) was defined

2. Ensure that the Applications URLs are in the SSO Domain and that the Domain pattern is being respected:

If using a **.domain.com** pattern (with the dot), sub-domains are allowed  
Examples:

* <http://jira.domain.com>
* <http://confluence.domain.com/external>
* <http://fisheye.domain.com/shared>

If using a simple **domain.com** pattern, sub-domains are not allowed.  
Examples:

* <http://www.domain.com/jira>
* <http://www.domain.com/confluence/external>
* <http://www.domain.com/fisheye/shared>

Cheers,  

WZ


Tags: crowd

fisheye-crucible

sso