...
https://confluence.atlassian.com/conf73/configuring-secure-administrator-sessions-991928809.html
Kerberos will not work when using host-resolver-rule flag in Chrome to configure DNS for your server
During testing you may want to use the host-resolver-rules flag to get your Jira answering on jira.example.com instead of configuring this correctly in DNS. See how host-resolver-rule is used:
chrome.exe --host-resolver-rules="MAP jira.example.com 192.16.1.50"
Our testing shows that during such a setup getting a Kerberos ticket form AD will not work. So when testing Kerberos you will either have to configure this link between jira.example.com and IP in your DNS servers or in your local hosts file.
Why do I see an error message in the Jira log when a user uses “Re-authenticate with SSO?
Jira gives an error Thread corrupted! ActionContext still references a HttpSession when the websudo is established. This does not have any functional impact. The message comes due to some internal weakness and is not possible to avoid. To remove the error message from the logs, you may add this line:<logger name="com.atlassian.jira.web.filters.steps.requestcleanup.WebworkActionCleanupStep" level="OFF"/>
just above the elements </Loggers></Configuration> in the bottom of the file:${JIRA_INSTALL}/atlassian-jira/WEB-INF/classes/log4j2.xml
Kerberos will not work when using host-resolver-rule flag in Chrome to configure DNS for your server
During testing you may want to use the host-resolver-rules flag to get your Jira answering on jira.example.com instead of configuring this correctly in DNS. See how host-resolver-rule is used:
chrome.exe --host-resolver-rules="MAP jira.example.com 192.16.1.50"
Our testing shows that during such a setup getting a Kerberos ticket form AD will not work. So when testing Kerberos you will either have to configure this link between jira.example.com and IP in your DNS servers or in your local hosts file.
User Directories
How are Kerberos users mapped to accounts in User Directories?
...
Can I use "Edit in Office" (WebDav) in combination with SAML or OIDC for my Confluence 6.11.x and newer?
Yes, in newer versions starting from Confluence 6.11.x you may use the Atlassian Companion app to edit your Office files also when you log in using SAML or OIDC.
Can I use "Edit in Office" (WebDav) in combination with SAML or OIDC for my Confluence 6.10.x and older?
...
.11.x and newer?
Yes, in newer versions starting from Confluence 6.11.x you may use the Atlassian Companion app to edit your Office files also when you log in using SAML or OIDC.
Can I use "Edit in Office" (WebDav) in combination with SAML or OIDC for my Confluence 6.10.x and older?
No, the WebDav technology does not support these technologies. If you are using SAML or OIDC for login into Confluence and want to edit a Word, Excel or PowerPoint document: Please download the document, edit it and then upload it again.
How is Kantega SSO affected by the new Atlassian login page?
The new Atlassian login page breaks the HTML elements that Kantega SSO injects into your login screen due to it’s new structure, and authenticates in a different way which also breaks prevent traditional login. For this reason, we recommend not setting the following parameter:
-Datlassian.authentication.legacy.mode
We mark Kantega SSO as compatible with product versions based on the default login page which means that using the above-mentioned parameter can lead to unexpected behavior. For this reason, Kantega SSO 7.32 is only available for versions with the new login page, but we will look into making it compatible with older versions as well when the new login page is released on all products.
User Directories
How are SAML and OIDC users mapped to accounts in User Directories?
...