Bug 256672 - support siteminder single sign-on
Summary: support siteminder single sign-on
Status: RESOLVED NOT_ECLIPSE
Alias: None
Product: z_Archived
Classification: Eclipse Foundation
Component: Mylyn (show other bugs)
Version: unspecified   Edit
Hardware: PC Windows XP
: P4 enhancement with 1 vote (vote)
Target Milestone: ---   Edit
Assignee: Mylyn Inbox CLA
QA Contact:
URL: https://studio.atlassian.com/browse/P...
Whiteboard:
Keywords: helpwanted
Depends on:
Blocks:
 
Reported: 2008-11-26 12:09 EST by Gerin CLA
Modified: 2010-02-27 20:17 EST (History)
3 users (show)

See Also:


Attachments
screen shot (82.77 KB, image/pjpeg)
2008-11-26 12:11 EST, Gerin CLA
no flags Details
Login Page (2.51 KB, text/html)
2009-04-23 10:18 EDT, Tobias Richter CLA
no flags Details

Note You need to log in before you can comment on or make changes to this bug.
Description Gerin CLA 2008-11-26 12:09:00 EST
I'm trying to add Jira as a Mylyn task repository, using our JIRA server URL and my normal username and single-sign-on password (We have our JIRA instance integrated with Single Sign-On login) 
Unfortunately, I keep getting

Server error: (302)Moved Temporarily

Is the server URL wrong? (If so, what's the correct one?)
Or is this related to the way we're being re-directed to the single-signon screen? (If so, is there a way around it?)

Any suggestions on how I can get this to work? fyi - we have all the basic requirements - JIRA RPC plugin 1.4.3 or higher , Accept remote API calls all enabled on JIRA side.

The Mylyn version being used is the one with comes bundled with Eclipse 3.4
Comment 1 Gerin CLA 2008-11-26 12:11:57 EST
Created attachment 118820 [details]
screen shot
Comment 2 Steffen Pingel CLA 2008-11-26 13:07:05 EST
The Mylyn connector expects a standard JIRA login page. Can you describe in more detail how you single sign-on system works?
Comment 3 Gerin CLA 2008-11-26 13:11:42 EST
Our JIRA instance is configured with SiteMinder Single Sign-On and all users have a JIRA default URL page set to https://server:port no/jira 

Once authenticated,users view the JIRA projects dashboard assigned to them.

Thanks
Gerin
Comment 4 Gerin CLA 2008-11-26 13:19:05 EST
Little more in detail : when a user types in the above JIR URL format, it redirects to Single Sign On Login, where oone has to enter credentials. After a successful login, user views the JIRA dashboard.

Thanks
Comment 5 Steffen Pingel CLA 2008-11-26 13:36:01 EST
Do you know if the single sign-on login page sets a cookie?
Comment 6 Gerin CLA 2008-11-26 15:11:17 EST
As of my knowledge, SiteMinder doesnot generate or manaage any cookies - its the specific application which does this I think
Comment 7 Gerin CLA 2008-12-01 14:02:07 EST
Any updates on this ?

Thanks
Gerin
Comment 8 Steffen Pingel CLA 2008-12-02 16:57:26 EST
Since we do not have access SiteMinder system we are not able to prioritize this request at the moment. If a patch is contributed for SiteMinder support accompanied by a test case I would happy to consider it for inclusion in Mylyn.
Comment 9 Mathias Stümpert CLA 2009-01-13 09:51:17 EST
Just wanted to mention that the missing SSO functionality of Mylyn also prevents my company from using Mylyn. I would rather guess that a lot of companies nowadays are using SSO for protecting their internal sites including e.g. bugzilla. So maybe it is more important to add SSO-functionalities to Mylyn than you might think. At least I would be very happy to see some basic support here :)
Comment 10 Tobias Richter CLA 2009-04-23 10:17:45 EDT
This is not a siteminder issue alone. We use CAS which seems to use the same style login and we would like to see support for this, too.

A hopefully correct explanation of the process: On login you are redirected to another (SSL secured) server with an HTML page similar to the one I will attach in a moment. If you enter your correct credentials there you are redirected to the original service with a token appended to the URL like ?ticket=ST-547-uMsCT01Q5mJhnOih0O1e-cas (Jira then checks if the token is valid for the user against the authentication server, but that is not the interesting bit here.)

I can see that this is not trivial to implement, give the html form nature of the login, but it would be very very nice to have. 
Comment 11 Tobias Richter CLA 2009-04-23 10:18:27 EDT
Created attachment 132940 [details]
Login Page
Comment 12 Steffen Pingel CLA 2010-02-27 20:17:29 EST
The Mylyn JIRA Connector has moved to Atlassian. All unresolved Mylyn bugs assigned to the JIRA component, which includes this bug, have been copied to https://studio.atlassian.com/browse/PLE and marked as resolved on bugs.eclipse.org. The new location of this bug report can be found in the URL field. 

Please see this FAQ entry for further details: http://wiki.eclipse.org/Mylyn/FAQ#What_happened_to_the_Mylyn_JIRA_Connector.3F .