PingOne side

If anything in the steps listed below deviates from what you observe in your PingOne IdP, please verify the original instructions on the Ping Identity documentation site.

  1. Sign in into PingOne Admin portal, navigate to Applications tab, click "Add application"
  2. Choose "New SAML Application"
  3. Enter application name (e.g. JIRA EasySSO), provide optional description, choose category and upload logo
  4. Click "Continue to Next Step"
  5. Choose "I have the SAML configuration"
  6. Select SAML 2.0 radio button
  7. Click "Or use URL" next to Upload Metadata, and enter the URL in the form https://<YOUR ATLASSIAN APPLICATION HOST>:<YOUR ATLASSIAN APPLICATION PORT>/<YOUR ATLASSIAN APPLICATION CONTEXT>/plugins/servlet/easysso/saml/metadata
    e.g if you are running Jira on custom port 2990 and context /jira: https://testjira.mydomain.com:2990/jira/plugins/servlet/easysso/saml/metadata 
    or if you running on the default HTTPS port 443 and no context: https://testjira.mydomain.com/plugins/servlet/easysso/saml/metadata 
  8. Once you navigate away (press Tab) from the URL field, the metadata will be loaded (after some time), values in the Assertion Consumer Service and the Entity ID fields will be set automatically
  9. Click "Continue to Next Step"
  10. Click "Add new attribute", enter "urn:oid:0.9.2342.19200300.100.1.3" in "Application Attribute" column, then from the drop-down list select "Email" in the "Identity Bridge Attribute or Literal Value" column, check "required" checkbox
  11. Click "Add new attribute", enter "urn:oid:2.5.4.42" in "Application Attribute" column, then from the drop-down list select "First Name" in the "Identity Bridge Attribute or Literal Value" column, check "required" checkbox
  12. Click "Add new attribute", enter "urn:oid:2.5.4.4" in "Application Attribute" column, then from the drop-down list select "Last Name" in the "Identity Bridge Attribute or Literal Value" column, check "required" checkbox
  13. Click "Add new attribute", enter "urn:oid:0.9.2342.19200300.100.1.1" in "Application Attribute" column, then from the drop-down list select either "SAML_SUBJECT" or "Email" in the "Identity Bridge Attribute or Literal Value" column, depending on what you use as the user-id in JIRA or Confluence - the user principal value or their email address
  14. Click "Save and Publish"
  15. Click "Download" for SAML Metadata, to download the metadata as .xml file (you will need to copy/paste values from this file into EasySSO SAML configuration screen later)
  16. Click "Download" for Signing Certificate, to download the certificate in Base64 form (you will need to copy/paste the certificate into EasySSO SAML configuration screen later)
  17. Click "Finish"

EasySSO side

Follow the details given on EasySSO with SAML - Configuration

EasySSO articles


Purchase from the marketplace

EasySSO on Atlassian Marketplace

Purchase