YouTrack as SAML Identity Provider for Artifactory
Before you start, verify the following prerequisites:
You must have administrator privileges in both Artifactory and YouTrack.
You must have the SSL certificate that is packed into the
.p12
key store that is set up for SAML connection in YouTrack.
To configure SSO for Artifactory with YouTrack as IdP:
Log into Artifactory with administrator privileges. Open
.Enable the SAML integration and provide the following parameters:
Parameter
Description
SAML Login URL
Paste the content of the Sign In URL field on page of the YouTrack server.
SAML Logout URL
Paste the content of the Sign Out URL field on page of the YouTrack server.
SAML Service Provider Name
Set up the service provider name of Artifactory by which it should be recognized in YouTrack. Use the domain name of your Artifactory instance.
SAML Certificate
Paste the content of the certificate that you packed into the
.p12
key store that is set up for SAML connection in YouTrack.Configure options related to processing unknown user accounts by Artifactory. We recommend that you enable the Auto Create Artifactory Users option.
Save the configuration.
Configure Custom URL Base of your Artifactory. Refer to the Artifactory documentation for details.
In YouTrack, select Access Management section of the Administration menu.
from theSelect the Registered Service Providers tab.
Click the Register service provider button.
In the dialog, provide the following parameters of the Artifactory service:
Parameter
Description
Name
Enter a name to be displayed for the Artifactory service in YouTrack.
Issuer
Use the name of your Artifactory service. If you use the Cloud version of Artifactory, enter the name in the format
<accountname>.artifactoryonline.com
.Description
Optionally, enter a description of the Artifactory service.
Consumer URL
Enter the Assertion Consumer Service (ACS) URL of your Artifactory service. General format of the URL is:
<Custom Base URL>/webapp/saml/loginResponse
YouTrack should send
LogoutResponse
Make sure that the option is disabled.