Customers have installed this add-on in at least 362 active instances.
    by KantegaAtlassian Verified
    Kantega is an Atlassian Verified vendor. Verified vendors demonstrate Atlassian standards for add-on quality, reliability, and support.

    Learn more

    for Confluence Server 5.5.1 - 6.3.1 and more versions
    Versions available for Confluence Server 4.1.7 - 5.5
    Kantega supports this add-on.

    Get support

    Data Center
    This add-on is compatible with the clustering and high-availability capabilities of our products.

    There are better things in life than passwords. SAML & Kerberos Single Sign-on

    There are better things in life than passwords. SAML & Kerberos Single Sign-on

    Say goodbye to passwords

    Smooth sailing with SAML & Kerberos

    Designed for easy setup

    Teams have more valuable things to do than typing passwords.

    Reduce distraction and increase productivity by enabling Single Sign-on.

    Choose SAML or Kerberos. Combine both to provide the best experience for every user.

    Supports leading SAML providers like AD FS, Azure AD, Google G-Suite, Okta or OneLogin. Zero-password login with Active Directory.

    Setting up SSO should take minutes, not weeks.

    Our setup wizards and test tools guide you to a working setup, without all the fuzz.

    More details

    Step-by-step wizard for setting up the most popular SAML providers. Kerberos support for zero-password login with Active Directory.

    Trusted by several of the largest financial institutions in the world.

    Available for JIRA, JIRA Service Desk, Confluence, Bitbucket, Bamboo and FishEye/Crucible.

    Customer feedback:

    • "Damn you guys are quick"
    • "The setup was amazingly easy and the instructions were clear"
    • "Your support is phenomenal, and helps restore faith in humanity"


    • Guided setup of AD FS, Azure AD, Centrify, Google G-Suite, Okta, OneLogin, Ping
    • Can create new users when they log in the first time
    • Certificate rollover with zero downtime
    • Supports any number of SAML identity providers
    • Fallback to username / password login


    • Step-by-step setup guide auto-suggests Kerberos settings
    • Test tools helps resolve any Active Directory configuration issues
    • Restrict Kerberos to only parts of your network
    • Multi-domain and cross-domain trust supported
    • Fallback to password or SAML login

    User reviews

    Sign in to write a review
    by Erik Brubak on 2017-07-06
    Excellent SSO add-on. Easy to install. Quick repons from support. We are using it on Jira, Confluence and Bitbucket.
    Was this review helpful?YesNo
    by Jørn Dyrkoren on 2016-12-07
    We had this plugin installed for a year. Easy setup and no issues with this plugin. Recommended.
    Was this review helpful?YesNo

    Thanks for the feedback!



    by Read Bixby on 2016-08-19
    I'll add our voice to the list of users who think this add-on (both the JIRA and Confluence versions) are great. They were pretty easy to set up, and the one time we had a question, it was addressed very quickly. We've been using this plugin for a couple of years now.
    Was this review helpful?YesNo

    Thank you for the feedback!

    We think that when delivering such a critical feature as SSO, being there for customers whey they need us is the most important part of our job. It`s also the most fun part we think.

    Cheers from Norway,


    by Rocky Cabral on 2016-07-11
    The whole team really loves the convenience of SSO in Confluence. It has increased productivity and has become indispensable.Great add-on!
    Was this review helpful?YesNo

    Thanks Rocky! Every enterprise product should have single sign-on. We have several reports that not only is the productivity increased, but also the usage.

    by Glen C on 2016-01-06
    I am on a trial basis for Confluence and so far it's been an easy setup. Login works but only if the user account is 1st created. I cannot seem to find any documentation on how to auto add users. Is this a Plugin feature or if this a confluence configuration issue. Once the account was created, works flawlessly.
    Was this review helpful?YesNo

    Glen. Thank you for your feedback! As of version 1.49 users no longer have to log in the first time. With this change in place, logging in with our plugin should have the same behavior as logging in with user name / passwords.


    Pricing details are loading…

    Paid-via-Atlassian pricing FAQ

    How does server add-on pricing work?

    Server products and add-ons are hosted on your servers. Licenses are perpetual and the purchase price include 12 months of maintenance (support and version updates).

    You can renew maintenance after 12 months at 50% of the current purchase price. You can upgrade the tier of your host product and add-on licenses at any time. Upgrade prices are calculated based on Atlassian's formula (view example).

    If add-on pricing changes after your initial purchase, there's a 60-day grandfathering period during which you can renew based on the old pricing.

    How do I determine my server pricing?

    Add-ons are billed based on the number of users in your host product. The add-on tier should match the licensed user tier of the Atlassian host product. For example, if you have a Confluence Server license for 25 users, you should purchase the 25-user tier for add-ons. Even if fewer users want to use the add-on than your host product license, the two licenses should match exactly.

    Do you offer academic, community, or open-source licenses?

    For server add-ons, purchase and renewal is half-price if you have an academic license for your Atlassian host product. Server add-ons are always free for community and open-source licenses.

    For more details about qualifying for special licenses, see here.

    Can I extend my free trial?

    For server add-ons, you can extend your add-on trial up to 5 times - in other words, for up to six months. Extend your trial by generating a new evaluation license key from Atlassian Marketplace. Click Try it free and you'll be directed to generate a new license. Paste this license key into the add-on listing in UPM from your Atlassian host product, and you're all set.

    How can I buy add-ons for my legacy JIRA Server or Confluence Server license?

    If you own a legacy JIRA Server Unlimited (100+ users) or Confluence Server Unlimited (2000+ users) license purchased in 2012 or earlier, legacy add-on pricing is no longer available. You have two options for add-on purchasing:

    • Purchase the add-on at the non-legacy Unlimited (10000+ users) tier.
    • Renew your JIRA or Confluence license at a non-legacy tier, then purchase the add-on at the same tier.

    Learn more

    Kantega is an vendor, committed to providing support for their add-ons at least 8 hours a day, 5 days a week.

    Vendor support resources


    Find out how this add-on works.

    See existing Q&A in Atlassian CommunityAsk a question in the Atlassian Community

    Atlassian-hosted discussions connect you to other customers who use this add-on.


    Version 2.3.0 Confluence Server 5.5.1 - 6.3.1 Released 2017-06-26


    Added custom attribute mapping of for full name and email


    • When provisioning users, custom full name and email attribute may be used
    • Fixes an issue where duplicate SPN would cause an error in the Kerberos setup wizard


    1. Log into your Confluence instance as an admin.
    2. Click the admin dropdown and choose Atlassian Marketplace. The Manage add-ons screen loads.
    3. Click Find new add-ons from the left-hand side of the page.
    4. Locate Kantega SSO for Confluence SAML Kerberos via search. The appropriate add-on version appears in the search results.
    5. Click Try free to begin a new trial or Buy now to purchase a license for Kantega SSO for Confluence SAML Kerberos. You're prompted to log into MyAtlassian. Kantega SSO for Confluence SAML Kerberos begins to download.
    6. Enter your information and click Generate license when redirected to MyAtlassian.
    7. Click Apply license. If you're using an older version of UPM, you can copy and paste the license into your Confluence instance.

    To find older Kantega SSO for Confluence SAML Kerberos versions compatible with your instance, you can look through our version history page.

    Similar add-ons