Using the Confluence On Premises SAML App
In addition to providing the Confluence Cloud Web application through the Okta Integration Network, Okta also supports single sign-on integration between Okta and the Confluence On-Premises SAML app. To configure the integration, you must install Okta's custom Confluence authenticator on your Confluence server. The Okta Confluence Authenticator Version History article lists the Confluence on-premise versions that support recent versions of the JAR. You can access the latest version of the okta-confluence.jar file from the Okta Downloads page. Download the file before you begin the integration.
For more information about Confluence custom authenticators, refer to the page Single Sign-on Integration with JIRA and Confluence on the Atlassian website. For information about configuring provisioning for the app, see Configuring Provisioning for Confluence (Atlassian).
Add the On-Premise App to Okta
Note: Steps 5 and 8 below provide links to other documents with additional instructions.
Optional - Filter User Access by IP Address, User Name, or Group Name
You can specify whether SAML authentication or service provider authentication is used by IP address, user name, or group name. This option is set in the okta-config-confluence.xml file in the following tags.
The portions highlighted in blue in following code shows the relevant sections of an okta-config-confluence.xml file.
The IP range in the <spUsers> tag specifies the IP addresses that use the native service provider authentication. The values in the <ipFrom> and <ipTo> tags specify IP addresses, and work as described above. This range has low priority than the range specified in the oktaUsers> tag above.
<!--The values in the <username> tags contained in the <spUsers> tag specify usernames to process with the native service provider authentication. Any number of <username></username> tags are permitted.
If there are any duplications in IP addresses or if an IP address is inadvertently excluded, the following four rules determine the processing procedure.