Configure cloud connectors

This guide explains how to connect your Atlassian cloud organization to your Data Center instance via cloud connectors. Configuring cloud connectors is a prerequisite step to using Rovo or Portfolio Insights connectors in your Data Center instance. 

These steps are applicable to Jira 11.3 and later and Confluence 10.2 and later. If you’re using earlier versions, check other connection options via application links or in-product integrations.

Before you begin

Before you can connect your Data Center to cloud, make sure you’ve completed these requirements.

Check your Data Center instance version

For Jira, you need to be on version 11.3 or later.

For Confluence, you need to be on version 10.2 or later.

If you’re using earlier versions, use Cloud companion app or check other connection options via application links or in-product integrations.

Common requirements

To set up cloud connector, you'll need:

1. Atlassian cloud organization. If you don’t have one yet, you can create it for free.
2. Organization admin permissions in Atlassian Cloud.
3. System admin permissions in your Data Center instances. You can have different admins between Cloud and Data Center. When connecting to Data Center, they’ll be able to share the connection details between them.
4. Configure the allowlist:
   1. Add the https://api.atlassian.com domain to the allowlist of your Data Center instance. Details on Configuring the allowlist in Jira and Configuring allowlist in Confluence
5. Configure your firewall:
   1. Create a new rule to allow TCP connection to api.atlassian.com on port 443.

Step 1: Install or upgrade Cloud companion app (Portfolio insights only)

Install or upgrade the Cloud Companion app to a version compatible with your Data Center product version. This app assists in linking your Data Center instance to cloud.

Step 2: Set up an application tunnel (Rovo only)

 If your Data Center instance is hosted on private networks (behind a firewall), cloud connections won’t reach it. To bypass this limitation, do one of the following:

1. Create an application tunnel
2. Use an existing tunnel:
   1. Find the HTTP connector you created in your conf/server.xml when you set up your tunnel. 
   2. Update the HTTP connector to include the attribute: secure="true".

More on required connections and upstream ports

Step 3: Set up organization connector

In this step, you'll create a connector between your cloud organization and Data Center instance. This connector will later be used to connect your Data Center instances to apps (Rovo or Portfolio Insights).

1. In your cloud Admin Hub, go to Data Management, then Data sources, and then Connected sources.
2. Select Connect data source.
   
3. On the Agree to connect screen, check the data you’re about to share, and then select Next.
4. On the Add details of your instance screen, provide the following information:
   1. Base URL – to find the base URL, log into your Data Center instance and go to Administration, and then General Configuration. 
   2. Instance name – the name of your instance.
   3. Select Next.
5. To complete the connection, on the Complete connection screen, under the Client credentials field, select Copy.
   
6. The next step depends on whether you have the Data Center system admin permissions:
   1. If you have Data Center admin permissions:
      1. Select Continue to Data Center. You'll be redirected to the admin settings of your Data Center instance to complete the connection. Otherwise, go to your Data Center instance, go to Administration, find Application links, and then go to Cloud connectors.
      2. Paste the security key into the Client credentials field, and then select Connect. Your new cloud connector will appear.
         
   2. If you don't have Data Center admin permissions, copy the client credentials and send them to your Data Center admin to complete the connection.

You have now established the connection from cloud to your Data Center instance. 

Step 4: Connect apps

To connect apps, on the Cloud connectors page in you Data Center instance, select Connect cloud apps. 

You'll be redirected to your cloud instance. Follow the steps based on the app you want to connect:

• Connect Jira Data Center to Rovo
• Connect Confluence Data Center to Rovo
• Connect Portfolio insights to Data Center instances

Connection status

Each status tells you what's happening with your connection and plays an important role in managing and monitoring the connection. 

Rotate connector credentials

When you rotate credentials, your existing security key will be replaced with a new one. You'll need to update the key in your Data Center instance to continue linking to cloud.

There are several use cases when you can rotate organization connector credentials:

• there’s a chance that existing credentials were exposed and are no longer safe 
• organization connector was disabled and you want to re-connect your Data Center instance to cloud.

To rotate credentials:

1. In your cloud Admin Hub, go to Data Management, then Data sources, and then Connected sources.
2. Select More actions , and then Rotate credentials.
   
3. On the Rotate credentials screen, select Next.
4. On the Copy credentials screen, under Client credentials, select Copy.
5. Select Continue to Data Center. You'll be redirected to the admin settings of your Data Center instance to complete the connection. Otherwise:
   1. Go to your Data Center instance, go to Administration, find Application links, and then go to Cloud connectors.
   2. Select More actions , and then Apply new credentials.
6. Paste the security key into the Client credentials field, and then select Connect. 
   

Disable connector

Once you set up the organization connector, you cannot remove it. You can disable the connector, and then enable again by applying new credentials. You can disable the organization connector only after you delete all connected apps.

To disable the connection:

1. In your cloud Admin Hub, go to Data Management, then Data sources, and then Connected sources.
2. Delete app connectors associated with the organization connector. You can delete app connectors from cloud or Data Center. 
   1. Delete Rovo connector in Jira
   2. Delete Rovo connector in Confluence
   3. Delete Portfolio insights connector
3. Select More actions , and then Disable connector.
4. Confirm your action by selecting Disable.