Skip to main content

JIRA Cloud

Connector name

agtjira3

Connector type

Executable

Type (UI field value)

JIRA Cloud

Connector status / support

Bravura Security-Verified

This connector has been tested and is fully supported by Bravura Security.

The following Bravura Security Fabric operations are supported by this connector (depending on your product license):

  • create account

  • delete account

  • create group

  • delete group

  • add user to group

  • delete user from group

  • get server information

  • List:

    • accounts

    • attributes

    • groups

    • members

For a full list and explanation of each connector operation, see connector operations.

Preparation

Before you can target JIRA Cloud, you must:

  1. Set up a JIRA site admin as target system administrator

  2. Create an API key for the site admin

  3. Create at least one template account

Setting up a Jira Site admin as target system administrator

Bravura Security Fabric uses a site admin on JIRA Cloud to perform Bravura Security Fabric operations. The account must have Site-Admins permission.

To create a JIRA site admin:

  1. Log into the JIRA admin site, http://admin.atlassian.com as a JIRA Cloud administrator.

  2. If you are an admin for multiple sites or an organization admin, click the site’s name to open the admin for that site.

  3. Click Invite users on the Users list page.

  4. Enter an email address you want a user to log in with in the Email Address field.

  5. Select the Site Administrator role from the Role drop-down list.

  6. Add the user to group(s) if needed.

  7. Click Invite users or select an existing user on the Users list page.

  8. Double click on the user or click on ... next to a user to open user’s details page.

  9. Click Add to group.

  10. Select the Site-admins group.

  11. Click Add to groups.

Creating an API key for the site admin

An API key is required to be generated by the site admin user (the target system administrator), which will be required to enter as the password when you add JIRA Cloud target system to Bravura Security Fabric .

  1. Log into https://id.atlassian.com/manage/api-token as the site admin created previously.

  2. Click Create API token.

  3. From the dialog that appears, enter a memorable and concise Label for your token and click Create.

  4. Click Copy to clipboard and save the API token. This will be needed when setting up a JIRA Cloud target system.

Creating a template account

Bravura Security Fabric uses a template account for creating new accounts in JIRA Cloud. Creating a template account is the same process as creating a target system administrator but with regular user permissions assigned.

Targeting the JIRA Cloud system

For each JIRA Cloud site, add a target system in Bravura Security Fabric (Manage the System > Resources > Target systems):

  • Type is JIRA Cloud , listed under Help Desk Systems .

  • Address uses the following options:

Table 1. JIRA Cloud address configuration

Option

Description

Options marked with a redstar.png are required.

Sitename redstar.png

The JIRA Cloud site’s name.

(key: site)

Validate the server’s certificate when connecting

Determines whether to validate the server’s security certificate for SSL connections. Default is "true".

(key: checkCert)

HTTP Network Proxy

(Optional) Proxy URL to use for connecting.

(key: proxy)

List deleted users on supported systems

Choose whether to list deleted users. Default is "false".

(key: listDeleted)



The address is entered as follows:

{site="<JIRA site name>";/[checkCert=true;]/[proxy=<Network proxy>;]}

The full list of target parameters is explained in Target System Options .

Handling account attributes

You can view the complete list of attributes that Bravura Security Fabric can manage, including native and pseudo-attributes, using the Manage the system (PSA) module. To do this, click JIRA Cloud from the Manage the system > Resources > Account attributes > Target system type menu.

For information about the native JIRA Cloud attributes managed by Bravura Security Fabric , consult your JIRA Cloud documentation.

The account attribute DisplayName is required when creating new users in JIRA Cloud.

JIRA Cloud user provisioning manages an integration between an user directory and JIRA Cloud site. To allow creating new accounts in JIRA Cloud, a source of profile IDs from a directory target system is required, It supplies internet-style login name, in email format, to JIRA Cloud connector, so that the connector will invite these users to join in JIRA Cloud.

The following example illustrates how to create JIRA Cloud account for Active Directory users:

  1. Add an Active Directory DN type target system:

    • Check Source of profile IDs checkbox.

    • Set Account attribute to use as profile ID to userPrincipalName .

  2. Add a JIRA Cloud type target system.

  3. Go to Resources > Template accounts to create a JIRA template account.

  4. Go to Workflow > Profile and request attributes.

  5. Add a profile and request attribute to provide a place to prompt the user for display name, for example, DISPLAYNAME. To learn how to do this, see Account attributes.

  6. Create an attribute group:

    • Add DISPLAYNAME as a member of the attribute group.

    • Ensure that you set read/write permissions to the attribute.

  7. Go to Resources > Account attributes to select JIRA Cloud target system.

  8. Map account attribute DisplayName to DISPLAYNAME. See Account attributes.

  9. Create a pre-defined request (PDR) for creating account on JIRA Cloud:

    • Set Intended recipients to existing users.

    • Include the JIRA Cloud template account under Options tab.

    • Include the attribute group created above under Attributes tab.

  10. Log in to Front-end (PSF) to submit a create new user request for an existing user.

  11. Approve the request if authorization is required.

  12. Check JIRA Cloud site, the Active Directory user has been invited to join JIRA Cloud site.

In this section: