
SAML & Kerberos Single Sign-on (SSO) all in one plugin. Sync users and groups from Google G-Suite, Azure and Okta
SAML & Kerberos Single Sign-on (SSO) all in one plugin. Sync users and groups from Google G-Suite, Azure and Okta
Teams have more valuable things to do than typing passwords.
Reduce distraction and increase productivity by enabling Single Sign-on.
Login with SAML or Kerberos
Combine SAML and Kerberos to provide the best experience for every user
Sync users and groups from Azure, G-Suite or Okta
Setting up SSO should take minutes, not weeks.
Our setup wizards and test tools guide you to a working setup, without all the fuzz.
More details
Step-by-step wizard for the most popular SAML providers. Password-less login with Active Directory using Kerberos
Trusted by several of the largest financial institutions in the world
Available for Jira, Jira Service Desk, Confluence, Bitbucket, Bamboo and FeCru
Customer feedback:
- "Damn you guys are quick"
- "The setup was amazingly easy and the instructions were clear"
- "Your support is phenomenal, and helps restore faith in humanity"
SAML:
- Guided setup for AD FS, Azure AD, G-Suite, Okta, OneLogin, Ping AuthAnvil, Bitium, Keycloak, Salesforce and WSO2
- Can create new users when they log in the first time
- Certificate rollover with zero downtime
- Supports any number of SAML identity providers
- Fallback to username / password login
Kerberos
- Step-by-step setup guide auto-suggests Kerberos settings
- Test tools helps resolve any Active Directory configuration issues
- Restrict Kerberos to only parts of your network
- Multi-domain and cross-domain trust supported
- Fallback to password or SAML login
Reviews for cloud
(19)Sign in to write a review
Thank you Amir! We appreciate the feedback.
Cheers from Trondheim, Norway.

Thanks Jason!
We love when customers are happy!

Thanks for the review Stefan!
We are always happy to help you out.

Thanks for the feedback!
Happy customers is what motivates us making the greatest SSO add-on possible!
Reviews for server
(19)Sign in to write a review
Adrian,
The reason our response time can be this quick has a lot to do with the wizard and the tooling we've baked into our product.
If we hadn't invested in the setup wizard, our support team would be absolutely swamped by now with helping customers getting every parameter of their ktpass command exactly right.
With that of the way, we can focus on improving the product and giving the best support we can.
Thanks a lot for your feedback,
Eirik.

Jared, thanks a lot for you feedback, that's much appreciated!
And you're absolutely right that we've put a lot of effort into smoothing the rough edges of the the installation and configuration process.
Making an SSO solution work for a single customer is easy. Making something that's effortless to set up for customers in all kinds of organizations around the globe is a much more demanding goal. But that's what we stretch for.
Cheers,
Eirik.

Thank you Amir! We appreciate the feedback.
Cheers from Trondheim, Norway.
Pricing
10 users$10 | 25 users$10 | 50 users$500 | 100 users$1000 | 250 users$2000 | 500 & upAdditional pricing details |
Paid-via-Atlassian pricing FAQ
- How does server app pricing work?
Server products and apps are hosted on your servers. Licenses are perpetual and the purchase price include 12 months of maintenance (support and version updates).
You can renew maintenance after 12 months at 50% of the current purchase price. You can upgrade the tier of your host product and app licenses at any time. Upgrade prices are calculated based on Atlassian's formula (view example).
If app pricing changes after your initial purchase, there's a 60-day grandfathering period during which you can renew based on the old pricing.
- How do I determine my server pricing?
Apps are billed based on the number of users in your host product. For Jira Server 7.0 or later, the app tier should match the maximum tier of the licensed Jira products on your instance. For example, if you're running Jira Software (50 users) and Jira Service Desk (10 agents) on the same instance, you should purchase the 50-user tier for apps. For versions of Jira Server prior to 7.0, the app tier should match the licensed user tier for Jira. Even if fewer users want to use the app than your Jira license, the two licenses should match exactly.Note: While this app has features specific to Jira Service Desk, the app is technically available across the whole Jira instance. Therefore the above guidelines for the license tier still apply.
- Do you offer academic, community, or open-source licenses?
For server apps, purchase and renewal is half-price if you have an academic license for your Atlassian host product. Server apps are always free for community and open-source licenses.
For more details about qualifying for special licenses, see here.
- Can I extend my free trial?
For server apps, you can extend your app trial up to 5 times - in other words, for up to six months. Extend your trial by generating a new evaluation license key from Atlassian Marketplace. Click Try it free and you'll be directed to generate a new license. Paste this license key into the app listing in UPM from your Atlassian host product, and you're all set.
- How can I buy apps for my legacy Jira Server or Confluence Server license?
If you own a legacy Jira Server Unlimited (100+ users) or Confluence Server Unlimited (2000+ users) license purchased in 2012 or earlier, legacy app pricing is no longer available. You have two options for app purchasing:
- Purchase the app at the non-legacy Unlimited (10000+ users) tier.
- Renew your Jira or Confluence license at a non-legacy tier, then purchase the app at the same tier.
Kantega is an Atlassian Verified vendor, committed to providing support for their apps at least 8 hours a day, 5 days a week.
Vendor support resources
Find out how this app works.
Atlassian-hosted discussions connect you to other customers who use this app.
Versions
Version 3.2.8 • Jira Server 7.1.0 - 7.9.0 • Released 2018-04-06
Summary
Bugfixes for GSuite, inactive users, AD-Server test, follow referrals in AD
Details
Fixed: GSuite user synchronization pagination fault.
Fixed: Proper handling when authenticating inactive JIRA-users (with both SAML and Kerberos).
Fixed: Report key version number correctly in Active Directory server test UI.
Fixed: Support for following referrals in multi AD-domains when using other user principal than sAMAccountName.
Installation
- Log into your Jira instance as an admin.
- Click the admin dropdown and choose Atlassian Marketplace. The Manage add-ons screen loads.
- Click Find new add-ons from the left-hand side of the page.
- Locate Kantega SSO for Jira (SAML & Kerberos) via search. The appropriate app version appears in the search results.
- Click Try free to begin a new trial or Buy now to purchase a license for Kantega SSO for Jira (SAML & Kerberos). You're prompted to log into MyAtlassian. Kantega SSO for Jira (SAML & Kerberos) begins to download.
- Enter your information and click Generate license when redirected to MyAtlassian.
- Click Apply license. If you're using an older version of UPM, you can copy and paste the license into your Jira instance.
To find older Kantega SSO for Jira (SAML & Kerberos) versions compatible with your instance, you can look through our version history page.