• Icon: New Feature New Feature
    • Resolution: Fixed
    • Icon: Critical Critical
    • None
    • Platform: All, OS: All

      Enabling silent sign on using integrated windows authentication would be a great
      feature to add to this plugin. Our users are accustomed to this behavior in our
      web applications and having to repeatedly enter their windows credentials when
      interacting with Hudson is quite unpopular.

          [JENKINS-3730] Implement Integrated Windows Authentication

          Peter Hayes created issue -

          Eric Stob added a comment -

          Not only would it be convenient -
          It would also prevent your credentials from going over the wire in plain text, an obvious security concern.
          I echo this request.
          Also this is a dupe of 1616

          Eric Stob added a comment - Not only would it be convenient - It would also prevent your credentials from going over the wire in plain text, an obvious security concern. I echo this request. Also this is a dupe of 1616
          Garen Parham made changes -
          Link New: This issue duplicates JENKINS-1616 [ JENKINS-1616 ]

          I absolutely agree that this is a necessary feature. Although we run jenkins on SSH which at least means that credentialls are not being passed in plain text. But setting up ssh properly is a real pain and it is still not desireable to have users typing in their AD credentials to access Jira when they are already logged on to a machine in the domain.

          Andrew Jefferson added a comment - I absolutely agree that this is a necessary feature. Although we run jenkins on SSH which at least means that credentialls are not being passed in plain text. But setting up ssh properly is a real pain and it is still not desireable to have users typing in their AD credentials to access Jira when they are already logged on to a machine in the domain.
          Kohsuke Kawaguchi made changes -
          Link New: This issue is related to JENKINS-20733 [ JENKINS-20733 ]

          Bruno Vincent added a comment -

          If your Jenkins instance runs on Tomcat and uses Atlassian Crowd as its user management system, you can provide your Jenkins users with Integrated Windows Authentication with the following add-on: https://marketplace.atlassian.com/plugins/com.cleito.iwaac

          Bruno Vincent added a comment - If your Jenkins instance runs on Tomcat and uses Atlassian Crowd as its user management system, you can provide your Jenkins users with Integrated Windows Authentication with the following add-on: https://marketplace.atlassian.com/plugins/com.cleito.iwaac

          Jacek Tomaka added a comment -

          bruno_vincent, that is not really a solution. The plugin is $10 per user. That is expensive.
          Tomcat itself can be configured to support Windows Authentication. How difficult would it be to tell Jenkins to use authentication context from tomcat?

          Jacek Tomaka added a comment - bruno_vincent , that is not really a solution. The plugin is $10 per user. That is expensive. Tomcat itself can be configured to support Windows Authentication. How difficult would it be to tell Jenkins to use authentication context from tomcat?

          Most but operate Jenkins with Jetty.

          Christian Häussler added a comment - Most but operate Jenkins with Jetty.

          Jacek Tomaka added a comment -

          Ok, but Jetty can also be configured with SPNEGO http://www.eclipse.org/jetty/documentation/current/spnego-support.html .
          How far is configuring SPNEGO in Jetty from getting implicit Windows Authentication in JENKINS ?

          Jacek Tomaka added a comment - Ok, but Jetty can also be configured with SPNEGO http://www.eclipse.org/jetty/documentation/current/spnego-support.html . How far is configuring SPNEGO in Jetty from getting implicit Windows Authentication in JENKINS ?

          Bruno Vincent added a comment - - edited

          jcztery, price is always subjective but if you keep in mind that you can use the same plugin on all your Atlassian products (Jira, Confluence, Bamboo, Bitbucket, FishEye/Crucible) and custom web applications that use Crowd as their user management system, it's probably not that expensive. By the way, the add-on can be deployed on both Tomcat and Jetty.

          Bruno Vincent added a comment - - edited jcztery , price is always subjective but if you keep in mind that you can use the same plugin on all your Atlassian products (Jira, Confluence, Bamboo, Bitbucket, FishEye/Crucible) and custom web applications that use Crowd as their user management system, it's probably not that expensive. By the way, the add-on can be deployed on both Tomcat and Jetty.

            jcztery Jacek Tomaka
            petehayes Peter Hayes
            Votes:
            34 Vote for this issue
            Watchers:
            16 Start watching this issue

              Created:
              Updated:
              Resolved: