Microsoft Entra ID single sign-on button for Confluence is not showing on login page

関連コンテンツ

  • 関連コンテンツがありません

お困りですか?

アトラシアン コミュニティをご利用ください。

コミュニティに質問

プラットフォームについて: Server および Data Center のみ。この記事は、Server および Data Center プラットフォームのアトラシアン製品にのみ適用されます。

Support for Server* products ended on February 15th 2024. If you are running a Server product, you can visit the Atlassian Server end of support announcement to review your migration options.

*Fisheye および Crucible は除く

Azure Active Directory is now Microsoft Entra ID

要約

After upgrading Confluence (or installing the below listed Confluence versions), Microsoft Azure Active Directory single sign-on for Confluence app:

  • Does not show the Login with Entra ID button on the login screen
  • Does not auto-login to Entra ID when the Enable Force Azure Login configuration is enabled

環境

tip/resting Created with Sketch.
  • Confluence 8.6.2 is not affected
  • Confluence 7.19.19 is not affected

予想される結果

With the Microsoft Azure Active Directory single sign-on for Confluence app installed, the Confluence login page:

  1. Should show a Login with Entra ID button; or
  2. Auto log-in to Entra ID if the Enable Force Azure Login is enabled in the Microsoft SSO app configuration

Actual Results

The Confluence login page does not show the Login with Entra ID button (error)

根本原因

Microsoft Azure Active Directory single sign-on for Confluence app v6.3.10 is not compatible with the above affected Confluence versions as the default Confluence login.vm file has changed from previous versions.

The latest Confluence versions no longer have a DOM object on the Confluence login page called id="os_username-label". As a result, the Microsoft SSO app is unable to locate the os_username-label DOM object and fails to inject the HTML for the Login with Entra ID button.

Workaround for Confluence Data Center

Confluence Data Center is bundled with the SSO for Atlassian Server and Data Center App. Confluence Data Center instances should therefore uninstall the Microsoft Azure Active Directory single sign-on for Confluence app and migrate across to the native Confluence SAML Authenticator as described in How to integrate Confluence Data Center with Azure for SAML 2.0 SSO.

The high level steps to migrate to the Confluence DC SAML SSO Authenticator:

  1. Update the Microsoft Entra » Enterprise Applications » Edit the Confluence SAML SSO by Microsoft
    1. Update the Basic SAML Configuration section:
      1. Remove any trailing slash from the Identifier (Entity ID) value
      2. Update both the Reply URL and Sign on URL to point:
        1. From <confluence-base-url>/plugins/servlet/saml/auth
        2. To <confluence-base-url>/plugins/servlet/samlconsumer
  2. Navigate to Confluence Administration » General Configuration » Authentication Methods
    1. Setup a new SAML SSO authenticator as detailed in How to integrate Confluence Data Center with Azure for SAML 2.0 SSO.

Temporary workaround for Confluence Server and Confluence Data Center


Workaround left for reference, see below Resolution...

These steps are no longer required and are left here for reference. Please follow the resolution steps to update to the latest version of Microsoft Azure Active Directory single sign-on for Confluence app that now has a fix.


(lightbulb) Confluence does not need to be shutdown, the below changes will take effect immediately.

(info) The below changes will need to be manually applied to every Confluence node if running as a Cluster

  1. Backup <confluence-install-dir>/confluence/login.vm 

  2. <confluence-install-dir>/confluence/login.vm を編集します。 

  3. Update FROM:

                        <fieldset class="compact-form-fields">
                        #assistiveLegend("accessibility.form.login")

    Update TO (added three new lines):

                         <fieldset class="compact-form-fields">
                        #assistiveLegend("accessibility.form.login")
                        <div class="field-group">
                            <span id="os_username-label" style="display:none">None</span>
                        </div>

  4. This will resolve Microsoft SSO app for the affected Confluence versions and:

    1. Add the Login with Entra ID button; and

    2. Auto login to Entra ID if Enable Force Azure Login is set

ソリューション


Last modified on Mar 4, 2024

この内容はお役に立ちましたか?

はい
いいえ
この記事についてのフィードバックを送信する

関連コンテンツ

  • 関連コンテンツがありません
Powered by Confluence and Scroll Viewport.