---
title: "SSO 3.X - Configuring Jira SSO app"
canonical: "https://support.appfire.com/space/SSO/18154050/SSO%203.X%20-%20Configuring%20Jira%20SSO%20app"
format: markdown
---
> Macro (aura-html)

> ⚠️ To configure settings for Global SSO app, you must have System Administrator permissions.

To configure Jira SSO app:

1. Log into your Jira as Admin.
2. In the cog wheel menu, select **Add-ons**.
3. In the **<span style="color: #333333">GLOBAL SSO</span>**<span style="color: #707070"> </span>section, click **Global SSO Settings**.  
The **Global SSO Configuration** page opens.
4. Fill in the fields on this page. The field description is provided in the [table below](#).  
> Macro (inline-media-image)


> ⚠️ If you entered wrong parameters, use a ''back door" functionality in order to avoid cyclic redirects and to access application bypassing SSO. To do this, add a GET parameter `sso=off` to the needed URL.   
> ⚠️ Example: **https://example.jira.com/?sso=off**.

### Field description for the **Global SSO Configuration** page

| **Attribute** | **Description** | **Examples** |
| --- | --- | --- |
| <span style="color: #000000">Login URL</span> | <span style="color: #000000">Identity provider (IDP) login page</span> | - <span style="color: #000000">https://adfs-test.com/adfs/ls/idpinitiatedsignon</span>
- <span style="color: #000000">https://aag0677.my.centrify.com/applogin/appKey/8980f085-4d24-48a7-a701-bb13c4e90b0f/customerId/AAG0677</span> |
| <span style="color: #000000">Logout URL</span> | <span style="color: #000000">Identity provider (IDP) logout page</span> | - <span style="color: #000000">https://aag0677.my.centrify.com/applogout</span>
- <span style="color: #000000">https://adfs-test.com/adfs/ls/?wa=wsignout1.0</span><span style="color: #000000"> </span> |
| Time Expiry | Life length of SSO token (cookie) for authentication, measured in seconds. Default value is 14400 (4 hours).<br>Each application has two sessions – its own session and SSO session. When application's session expires, the user will be logged out from the application. When SSO session expires, the user will still be able to use this application but won't be able to log into another one without IDP re-authentication. | 14400 |
| Exclude paths | You can disable SSO from URLs which contain custom pieces of URL (semicolon separated values).<br>By default Global SSO blocks REST API, so in order to allow for this, add an exclusion for the REST path ("/rest"). | /redirect;/applinks;/charts;/oauth;/rest;/server-info.action;/sr;/status |
| <span style="color: #000000">Exclude IP addresses</span> | To support deep linking between applications, specify a list of application's IP addresses for linking <span style="color: #333333">separated by semicolon.</span> |  |


You can test your SSO cookie by using the **Test SSO** button.

# Related topics

[SSO 3.X - Configuring Confluence SSO app](https://appfire.atlassian.net/wiki/spaces/SSO/pages/18153905)

[SSO 3.X - Configuring Bitbucket SSO app](https://appfire.atlassian.net/wiki/spaces/SSO/pages/18153928)

[SSO 3.X - Configuring Bamboo SSO app](https://appfire.atlassian.net/wiki/spaces/SSO/pages/18153843)

[SSO 2.0 - Configuring FishEye SSO app](https://appfire.atlassian.net/wiki/spaces/SSO/pages/18153703)