Overview

Still need help?

The Atlassian Community is here for you.

Ask the community

You can integrate Atlassian products either by using:

Cloud connectors

Starting with Jira 11.3 and Confluence 10.2, we’re introducing cloud connectors — a new approach to link Data Center and cloud via Admin Hub. In this approach, application links remain the method of connection and are now enhanced with OAuth 2.0. 

If you’re using earlier versions, check other connection options via application links or in-product integrations.

For cloud connectors, all authentication and authorization flows use OAuth 2.0 for improved security. OAuth 2.0 introduces granular admin controls and consent management. This industry-standard protocol is designed to provide secure, delegated access between applications without exposing user credentials. 

Other methods of connection such as application tunnels or in-product integrations will continue to work, but we recommend switching to cloud connectors as you upgrade. 

The prerequisite to connecting Rovo or Portfolio insights is creating a cloud connector in cloud Admin Hub. If your Data Center instance is behind a firewall, connect application tunnels before establishing the Data Center to cloud connection. Details on configuring cloud connectors

What products I can link

All connections are managed in Admin Hub with Data Center instances connected via a dedicated organization links. The currently supported connectors are Rovo and Portfolio insights.

Network requirements

To enable data transmission between your Data Center instance and Atlassian cloud:

  1. Configure the allowlist:
    1. Add the https://api.atlassian.com domain to the allowlist of your Data Center instance. 
  2. Configure your firewall:
    1. Create a new rule to allow TCP connection to api.atlassian.com on port 443.

Details on Configuring the allowlist in Jira and Configuring allowlist in Confluence

You can use application tunnels to allow cloud to send data to your private network without opening it for any incoming connections or allowlisting Cloud IP ranges. Once you create a tunnel, you point application links at it, and all the traffic gets forwarded to the target Server or Data Center instance. For more info, see Connect to self-managed products with application tunnels.

Application links are the most common way to integrate Atlassian products. They create a communication window between your products that can be used to exchange functionalities created specifically for application links or coming from Marketplace apps. Products linked through application links communicate with each other directly, which means there are some network requirements needed for cloud to reach your Data Center or Server instances if they live behind a firewall.

What products can I link

Application links exist in all Atlassian products that have the plugin system, which is a framework that lets you install and use plugins (apps). These products are:

  • Cloud: Jira, Confluence

  • Server and Data Center: Jira, Confluence, Bitbucket, Bamboo, Fisheye, Crucible, Crowd

You can link all of these products together, but some of the integrations won’t provide any functionalities (e.g. Confluence Cloud to Confluence Server) unless you use custom or Marketplace apps that provide extra extensions.

What kind of features are available

There’s a fixed set of features made by Atlassian specifically for application links. Some examples are Jira issue links, Confluence macros that let you display issues on pages, or development panel that lets you see dev info from Bitbucket in Jira. We've described all these features and their behavior (especially changed from Server-Server integrations) on these pages.

How are application link in cloud different

The application links mechanism used in cloud and Data Center or Server is essentially the same, as it’s the same bundled plugin (although in different versions), so you could theoretically expect the same features as you already know from integrating just our self-managed products. However, because of differences in Atlassian cloud products, some of the features won’t be available and that’s not strictly related to application links. An example of that is Jira gadgets – although they could work, we’ve deprecated registering external gadgets in Jira Cloud, so you won’t be able to add Jira Server gadgets to Jira Cloud (but it works the other way round).

Network requirements

Application links connect your products directly, so they need to be able to reach each other. Since Atlassian cloud products use different set of IPs, you’ll need to allowlist all of these IPs in your network to allow incoming communication.

This can be solved by using application tunnels. It's a feature that lets you forward application links from Cloud to Server in a secure way, without opening your network for any incoming connections.

As for outgoing communication, your self-managed products will need to be able to reach your cloud products, although you most likely already have that enabled in your network.

To learn about the requirements for direct links, see Create application links.

To learn how to use application tunnels to avoid these requirements, see Connect to self-managed products with app tunnels.

Other information

These pages are here to summarize what’s available when integrating cloud and self-managed products. If you’d like to learn more about application links, like OAuth communication used, troubleshooting information, version mapping, and other technical details, see the Application links documentation.

In-product integrations

In-product integrations have been created to target and exchange specific features rather than focus on broader integration. Rather than just integrating Jira with Confluence (which application links do), one of the in-product integrations lets you use Confluence spaces as knowledge bases for customer portals in Jira Service Management – a solution for a very specific and narrow need, and nothing more. We’re calling them in-product integrations here for the need of grouping them together, but every product will refer to their integration in a different way, most likely referring to the goal it achieves (Use Confluence Cloud as knowledge base).

What products can I link

It really depends on whether an in-product integration has been created between the products you’re using. These integrations have been created by different products at different times to meet their specific needs, and there isn’t a common ground like the plugin system for application links.

For a list of available in-product integrations between cloud and Data Center or Server, see Configure in-product integrations.

Network requirements

In-product integrations always use outgoing communication from your network. It’s reaching either cloud products directly or some APIs exposed on the cloud side.

No incoming connections are required, so if you can’t use application links because of network restrictions, you can use just in-product integrations if they provide the features you’re interested in.

Which one should you choose?

Ideally, you’d use both as they complement each other. While application links allow your products to exchange their primary and most known functionalities, in-product integrations either make them better or add extra features. You need to decide whether you can allowlist additional IPs to benefit from both. If not, you can still keep your network relatively closed and use only in-product integrations if they provide the features you’re interested in.

Summary of integrations between cloud and self-managed products

When describing the features available in these integrations, we’ve marked them as coming from application links or in-product integrations, so you can decide which integration you need. For more info, open the integration you’re interested in:

Last modified on Dec 3, 2025

Was this helpful?

Yes
No
Provide feedback about this article
Powered by Confluence and Scroll Viewport.