> ## Documentation Index
> Fetch the complete documentation index at: https://infisical.com/docs/llms.txt
> Use this file to discover all available pages before exploring further.

# Jira connection

> Learn how to configure a Jira connection for Infisical.

A Jira connection authenticates Infisical to Jira Cloud with an [API token](https://support.atlassian.com/atlassian-account/docs/manage-api-tokens-for-your-atlassian-account/), or to Jira Data Center with a [personal access token](https://confluence.atlassian.com/enterprise/using-personal-access-tokens-1026032365.html), so Infisical can read your Jira tickets.

Infisical acts as the Jira user who owns the token, so Infisical can only read the tickets that user can see.

## Prerequisites

* A Jira Cloud site, or a Jira Data Center instance that Infisical can reach directly or through a [Gateway](https://infisical.com/docs/documentation/platform/gateways/overview.md)
* A Jira user for Infisical to act as, and a Jira admin who can change that user's permissions

## Step 1: Create an API token or personal access token

The token's user needs these permissions in Jira:

* **Browse spaces** in Jira Cloud, or **Browse projects** in Jira Data Center, on every project whose tickets you want Infisical to read
* Permission to view customer requests in your Jira Service Management projects, so Infisical can read a request's approvals

Then create the token as that user:

**Jira Cloud**

**Step 1**

Sign in to Atlassian as the user, then go to **Security** > **API tokens** in your Atlassian account settings.

**Step 2**

Select **Create API token**. Infisical connects to your Jira site's URL, and Atlassian only accepts tokens without scopes there.

**Step 3**

Enter a name, such as `infisical`, choose an expiration date, and select **Create**. Before the token expires, create a new one and enter it with **Edit Credentials** in the connection's menu on the **App Connections** tab.

**Step 4**

Copy the token. Atlassian shows it only once.

**Jira Data Center**

**Step 1**

Sign in to Jira as the user, then go to **Profile** > **Personal Access Tokens**.

**Step 2**

Select **Create token**, enter a name, such as `infisical`, and create the token.

**Step 3**

Copy the token. Jira shows it only once.

## Step 2: Create the app connection

Next, create the app connection in Infisical.

> [!TIP]
>
> To create the connection using the API, use the [Create Jira Connection](https://infisical.com/docs/api-reference/endpoints/app-connections/jira/create.md) endpoint.

**Step 1**

In the sidebar, select **Integrations**, then open the **App Connections** tab.

**Step 2**

Select **Add Connection** and choose **Jira**.

**Step 3**

Fill out the form's fields:

**Jira Cloud**

* **Name**: A descriptive name for the connection
* **Description** (optional): A note for future reference
* **Gateway** (optional): The [Gateway](https://infisical.com/docs/documentation/platform/gateways/overview.md) Infisical connects through, if Infisical can't reach your Jira site directly
* **Method**: **API Token (Jira Cloud)**
* **Instance URL**: The URL of your Jira site without a path, such as `https://your-domain.atlassian.net`
* **Email**: The email address of the Atlassian account that owns the API token
* **API Token**: The API token you [created in Step 1](#step-1-create-an-api-token-or-personal-access-token)

**Jira Data Center**

* **Name**: A descriptive name for the connection
* **Description** (optional): A note for future reference
* **Gateway** (optional): The [Gateway](https://infisical.com/docs/documentation/platform/gateways/overview.md) Infisical connects through, if Infisical can't reach your Jira instance directly, such as when the instance is behind a firewall
* **Method**: **Personal Access Token (Jira Data Center)**
* **Instance URL**: The URL of your Jira instance, including the context path if Jira runs under one, such as `https://jira.example.com/jira`
* **Personal Access Token**: The personal access token you [created in Step 1](#step-1-create-an-api-token-or-personal-access-token)
* **SSL Certificate** (optional): On the **SSL** tab, the CA certificate in PEM format that signed your Jira instance's TLS certificate
* **Reject Unauthorized**: On the **SSL** tab, whether Infisical refuses to connect when it can't verify the instance's TLS certificate (on by default; for a self-signed certificate, enter its CA certificate in **SSL Certificate** instead of turning this off)

Then, select **Connect to Jira**.

When you select **Connect to Jira**, Infisical verifies that Jira accepts the token, and doesn't save the connection if Jira rejects it. Infisical doesn't check the permissions from [Step 1](#step-1-create-an-api-token-or-personal-access-token) until it reads a ticket.

> [!TIP]
>
> Your Jira app connection is ready to use.

## Step 3: Configure integrations

Now that your Jira app connection is configured, you can use it to set up the following integrations:

> **[PAM auto-approval](https://infisical.com/docs/documentation/platform/pam/access-requests/auto-approval.md)**
>
> Approve PAM access requests when a linked Jira ticket passes a folder's rules.


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.