目的

Sometimes user may need to bypass SAML as the primary authentication method in JIRA and set it to be secondary authentication method for troubleshooting purposes. In the UI you can change the setting by going to ⚙ > System > Authentication Methods and set the toggle under the Show on login page column for the Username and password login option.

ソリューション

1. Create a backup before proceeding with the steps below.
   

   データベースの変更を行う場合は必ず事前にバックアップを取得してください。可能な場合は、まずステージング サーバーで SQL コマンドの変更、挿入、更新、または削除を行うようにします。

2. Connect to JIRA Database.

3. Check current configuration to see if JIRA is using SAML as primary authentication:

   1. Get the ID for the com.atlassian.plugins.authentication.samlconfig.redirect-on-login properties by running below query:

      For newer versions of Jira (8.6.x) we should use property com.atlassian.plugins.authentication.sso.config.redirect-on-login

      select id from propertyentry where property_key='com.atlassian.plugins.authentication.samlconfig.redirect-on-login';

   2. Run below query with the ID from above query:

      select * from propertystring where id=<ID_FROM_PREVIOUS_QUERY>; 

   3. If the result return under propertyvalue column is true, then JIRA is using SAML as primary authentication.

4. To switch to SAML SSO from the primary to the secondary authentication method, run the following query:

   update propertystring set propertyvalue = 'false' where id=<ID_FROM_PREVIOUS_QUERY>;

5. Verify the change was implemented by running the following query (result should read 'false' under propertyvalue column)

   select * from propertystring where id=<ID_FROM_PREVIOUS_QUERY>; 

   jira460=# select * from propertystring where id=10916;
     id   | propertyvalue
   -------+---------------
    10916 | false

6. Restart JIRA for the change to take effect.
7. After restart, you can login to JIRA using normal method of username and password.