# cloudflare-access-for-atlassian

**Repository Path**: mirrors_cloudflare/cloudflare-access-for-atlassian

## Basic Information

- **Project Name**: cloudflare-access-for-atlassian
- **Description**: Authenticate Atlasssian products when using Cloudflare Access
- **Primary Language**: Unknown
- **License**: Not specified
- **Default Branch**: master
- **Homepage**: None
- **GVP Project**: No

## Statistics

- **Stars**: 0
- **Forks**: 0
- **Created**: 2020-08-08
- **Last Updated**: 2026-02-28

## Categories & Tags

**Categories**: Uncategorized

**Tags**: None

## README

# Cloudflare Access For Atlassian

This project implements a set of plugins for authenticating users through Cloudflare Access on Atlassian products.

Currently supported Atlassian products versions:
- JIRA `>= 10`
- Confluence  `9` 
- Bitbucket `>= 9`

> ⚠️ **Earlier Atlassian products versions**
>
> For earlier versions of Atlassian products, you must use up to plugin version 2.x.
> 
> Previously supported versions are:
> - JIRA `>= 7.2` until `9.x` 
> - Confluence  `6`,`7`,`8`
> - Bitbucket `>= 6.x` until `8.x`

## Installation

These instructions apply to all supported Atlassian products, installed locally.
 
1. Download the respective plugin from [Releases](https://github.com/cloudflare/cloudflare-access-for-atlassian/releases) page
1. Login in the Atlassian application as administrator
1. Go to *Manage add-ons* on the administration page or menu
1. Select *Upload add-on* and upload the JAR you downloaded
1. Go to *System configuration* or administration page
1. Go to *Cloudflare Access* menu on the left side menu
1. Setup your Cloudflare Access and server details

## Plugin Configuration

The configuration screen looks like below in all Atlassian products and the values to be placed in the required 
fields are available in your Cloudflare Access configuration.

| Option                           | Description                                                                                                                                             |
|----------------------------------|---------------------------------------------------------------------------------------------------------------------------------------------------------|
| Token Audience (required)        | Audience(s) from Cloudflare Access configuration page. Multiple audiences are allowed for the same authentication domain.                               |
| Authentication Domain (required) | Cloudflare Access configured authentication domain                                                                                                      |
| Allowed Email Domain             | Emails that match this domain will authorize with their Access JWT. All other emails will be required authorize again with their Atlassian credentials. |
| Match users by                   | Users can be matched by email or username field                                                                                                         |

![PLugin configuration screen](docs/images/configuration-screen.png)

The configuration is stored and is kept between plugin and Atlassian updates.

## Updates

Whenever a new version is released, admins will get a notification in Atlassian product UI indicating that 
a new version is available.

## Other Documentation Links

- [Troubleshooting](docs/Troubleshooting.md)
- [Plugin development](docs/Development.md)
- [Plugin testing](docs/Testing.md)