Secure, Enterprise-Ready Authentication for Jenkins
The Jenkins SAML Single Sign-On Plugin enables secure, seamless, role-based authentication for Jenkins using SAML 2.0, supporting all major Identity Providers.
Automatically sync groups from your IdP to Jenkins for consistent and simplified user management.
Users log in once with their corporate IdP—no extra passwords or hassle.
Signed & encrypted SAML assertions
IdP-side MFA
Emergency local login (break-glass access)
JIT (Just-in-Time) user creation
Attribute-based role mapping
Role-based access control (RBAC)
Create & manage native Jenkins users directly via the plugin—no security realm changes required.
Easily transfer SAML configurations between Jenkins instances to ensure consistent deployments.
Use Crowd as a central directory, reusing existing groups and authentication flows.
| Community — Free forever | Premium — 30-day free trial |
|---|---|
| SAML SSO + local login fallback | Just-in-Time group/role provisioning |
| Auto-create users on first login | Enforce SSO for end users with backdoor URL support |
| Signed & encrypted SAML requests/responses | Single Logout (SLO) |
| Proxy & load-balancer friendly | Custom login page |
| Export / import configuration | Custom attribute → role mapping |
| Jenkins Local User Management | |
| Crowd Login Support |
ADFS, Azure AD, Azure AD B2C, Keycloak, Okta, Shibboleth, Salesforce, Google Workspace, AWS, Office 365, SimpleSAMLphp, OpenAM, Centrify, RSA, IBM, Oracle, OneLogin, Bittium, WSO2, Auth0, AuthAnvil — and all SAML 2.0 capable IdPs
Yes, Jenkins SAML SSO plugin offers you the option to create a custom login template (with logo, text, button) so that your users recognize your IdP immediately and know they’re at the right place!
Jenkins SAML SSO works everywhere.
Jenkins versions ≥ 2.319.3 (LTS & weekly), Linux, Windows, Docker, Kubernetes.
That’s alright! Jenkins SAML SSO plugin provides you with the flexibility of using native login or enforcing SSO for your end users.
It also includes emergency local login for break-glass access.
The Jenkins SAML SSO plugin supports a wide range of IdPs along with all SAML 2.0 capable Identity Providers to cater to all your needs.
List of supported IdPs:
ADFS, Azure AD, Azure AD B2C, Keycloak, Okta, Shibboleth, Salesforce, GSuite/Google Apps, AWS, Office 365, SimpleSAMLphp, OpenAM, Centrify, RSA, IBM, Oracle, OneLogin, Bittium, WSO2, Auth0, AuthAnvil, and all SAML 2.0 capable Identity Providers.
Mastercard uses Atlassian Crowd with our integration to deliver robust authentication for their Jenkins environment. This setup reinforces access security and contributes to a more resilient overall system.
The Bank of Ireland (BOI) leverages our Jenkins SAML SSO Plugin to provide fast, seamless, and reliable Single Sign-On (SSO) for their teams, improving both security and user experience
📚 Full Setup Guides here
📞 Contact Us here
Manage Jenkins → Configure Global Security → Security Realm = miniOrange SAML 2.0
Paste metadata URL or upload XML → Save → Test Login 🎉
⭐Free 30-day premium trial — no credit card needed⭐
Switch between Premium and Community with zero downtime
- Sign in as admin → Manage Jenkins
- Scroll to System Log
- Click Add new Log Recorder → name it SAMLlogs
- Add logger: org.miniorange.saml → Level: FINE
- Save
- Perform a test login
- Return to logs → copy output
- Email logs to [email protected]
We’re here 24×7 for licensed customers.
Email: [email protected]