Skip to main content
A Jira connection authenticates Infisical to Jira Cloud with an API token, or to Jira Data Center with a personal access token, so Infisical can read your Jira tickets. Infisical acts as the Jira user who owns the token, so Infisical can only read the tickets that user can see.

Prerequisites

  • A Jira Cloud site, or a Jira Data Center instance that Infisical can reach directly or through a Gateway
  • A Jira user for Infisical to act as, and a Jira admin who can change that user’s permissions

Step 1: Create an API token or personal access token

The token’s user needs these permissions in Jira:
  • Browse spaces in Jira Cloud, or Browse projects in Jira Data Center, on every project whose tickets you want Infisical to read
  • Permission to view customer requests in your Jira Service Management projects, so Infisical can read a request’s approvals
Then create the token as that user:
1
Sign in to Atlassian as the user, then go to Security > API tokens in your Atlassian account settings.
2
Select Create API token. Infisical connects to your Jira site’s URL, and Atlassian only accepts tokens without scopes there.
3
Enter a name, such as infisical, choose an expiration date, and select Create. Before the token expires, create a new one and enter it with Edit Credentials in the connection’s menu on the App Connections tab.
4
Copy the token. Atlassian shows it only once.

Step 2: Create the app connection

Next, create the app connection in Infisical.
To create the connection using the API, use the Create Jira Connection endpoint.
1
In the sidebar, select Integrations, then open the App Connections tab.
2
Select Add Connection and choose Jira.
3
Fill out the form’s fields:
  • Name: A descriptive name for the connection
  • Description (optional): A note for future reference
  • Gateway (optional): The Gateway Infisical connects through, if Infisical can’t reach your Jira site directly
  • Method: API Token (Jira Cloud)
  • Instance URL: The URL of your Jira site without a path, such as https://your-domain.atlassian.net
  • Email: The email address of the Atlassian account that owns the API token
  • API Token: The API token you created in Step 1
Then, select Connect to Jira.
When you select Connect to Jira, Infisical verifies that Jira accepts the token, and doesn’t save the connection if Jira rejects it. Infisical doesn’t check the permissions from Step 1 until it reads a ticket.
Your Jira app connection is ready to use.

Step 3: Configure integrations

Now that your Jira app connection is configured, you can use it to set up the following integrations:

PAM auto-approval

Approve PAM access requests when a linked Jira ticket passes a folder’s rules.