Fallback URL for Bamboo when SAML SSO is enabled
Platform notice: Server and Data Center only. This article only applies to Atlassian products on the Server and Data Center platforms.
Support for Server* products ended on February 15th 2024. If you are running a Server product, you can visit the Atlassian Server end of support announcement to review your migration options.
*Except Fisheye and Crucible
Summary
When SSO is the primary authentication method in Bamboo and fails for some reason, you can enable username/password authentication fallback by issuing a REST call. This article explains how to achieve that.
Environment
The solution is applicable to Bamboo 8.1 an later
Solution
Call Bamboo API Endpoint
/rest/authconfig/1.0/sso
and change the{"enable-authentication-fallback": true
}Enable Basic auth fallback$ curl --location --request PATCH '$BAMBOO_BASE_URL/rest/authconfig/1.0/sso' --header 'Authorization: Bearer NzgyNT...HnQsHDfW' --header 'Content-Type: application/json' --data-raw '{"enable-authentication-fallback": true}'
And then on the browser, use this URL to display the basic authentication Bamboo login page:
Bamboo version URL 9.6 and earlier $BAMBOO_BASE_URL/userlogin!doDefault.action?auth_fallback
10.0 and later $BAMBOO_BASE_URL/userlogin.action?auth_fallback
You can also restore the basic authentication username/password authentication setting the
{"show-login-form": true}
Enable classic login form$ curl --location --request PATCH '$BAMBOO_BASE_URL/rest/authconfig/1.0/sso' --header 'Authorization: Bearer NzgyNT...HnQsHDfW' --header 'Content-Type: application/json' --data-raw '{"show-login-form": true}'