To configure Atlassian Jira Cloud for the Netskope SaaS Security Posture Management, follow the instructions below.
Prerequisites
- You require an Atlassian standard, premium or enterprise subscription plan.
- An Atlassian site-admin account with the following permissions:
- Global Permissions: Administer Jira and Browse users and groups
- Project Permissions: Browse Projects
- Refer to manage-global-permissions and manage-project-permissions for more information
Netskope recommends creating a dedicated service account (with appropriate permission) exclusively for the Netskope integration. Revoking access to this service account will break the integration with Netskope. Creating a dedicated service account will ensure that the integration with Netskope will not break due to an employee exiting, and consequently a deactivation of the account.
Configure Netskope to Access your Atlassian Jira Cloud account
To authorize Netskope to access your Atlassian Jira Cloud account, follow the steps below:
- Log in to the Netskope tenant UI and go to Settings > Configure App Access > Next Gen > SECURITY POSTURE.
- Under Apps, select Jira and click Setup Security Posture Instance. The Setup Instance window opens.
- Under Site Domain, enter the fully-qualified domain name of the Atlassian account (example: mycompany.atlassian.net).
- Under Atlassian Administrator email, enter the email of Atlassian administrator with whom the findings around security posture could be shared. This can be enabled when creating security posture policies.
- Under Security Scan Interval, select the required scan interval.
- Click Grant Access. If you’re not signed in, you will be redirected to the Atlassian sign-in page. Login with the Atlassian site-admin account.
- On the admin consent page, review the permissions requested.
- Under the Authorize for site: Make sure the site domain is the same as the one you entered in step 3. If you’re logged into multiple Atlassian instances, you will see a drop-down list, in which case please select your site domain from the list. If you do not see the site domain you entered, you will need to log into the site-admin account for that respective site.
- Click Accept. When the configuration results page opens, click Close.
- Refresh your browser, and you will see the instance.