[ Applies to ] StorageGuard 9.x and later / Jira Software Cloud, Jira Service Management Cloud / ITSM Systems interface
StorageGuard can open, update, and close issues in Atlassian Jira Software and Jira Service Management for the risks it finds, so your team can triage StorageGuard findings in the same projects and workflows it already uses. This article explains how to import the StorageGuard Jira connector, point it at your Jira site, choose how risks are forwarded, and confirm that issues are created.
In this article
Before you begin
Make sure you have the following:
- A StorageGuard account with administrative privileges.
- A Jira account for the integration. We recommend a dedicated service account rather than a personal account, so the integration keeps working when people change roles.
- Permissions for that account in the target Jira project to browse the project and to create, edit, and transition issues.
- The project key of the target Jira project and the exact name of the issue type StorageGuard should create. The issue type must be available in that project.
- An Atlassian API token for the integration account. See the procedure below.
- Outbound HTTPS (port 443) access from the StorageGuard master server to your Jira site.
- The StorageGuard Atlassian Jira Connector JSON file attached to this article.
Create an Atlassian API token
StorageGuard authenticates to Jira with the integration account's email address and an API token instead of a password.
- Sign in to id.atlassian.com with the integration account.
- Go to Profile > Account settings > Security.
- Under API tokens, click Create and manage API tokens.
- Click Create API token, enter a label such as
StorageGuard Integration, set an expiration date if prompted, and create the token. - Copy the token and store it somewhere secure, such as your organization's password manager.
Note: Atlassian displays the token only once. If you lose it, create a new token and update the connector. Make a note of the expiration date so you can replace the token before it expires and the integration stops working.
Configure the StorageGuard Jira connector
The connector file contains a ready-made Jira provider with placeholder values. You import it once, then replace the placeholders with your own Jira details.
Import the connector
- Download the StorageGuard Atlassian Jira Connector JSON file attached to this article.
- Log in to StorageGuard with an administrative account.
- Go to Settings > Interfaces > ITSM Systems.
- In the top-right corner, click Import ITSM Provider and select the JSON file you downloaded. A new Jira provider appears in the list.
- Right-click the Jira provider and select Edit.
Enter the integration credentials
- Under Authentication:
- In the User field, replace
user@company.comwith the email address of the Jira integration account. - In the Password field, paste the API token you created.
- In the User field, replace
Point the connector to your Jira project
- Under API Calls - Global, in the Host field, replace
yourcompany.atlassian.netwith your Jira site host name, in the same format as the placeholder. - Under API Calls - Open and API Calls - Update, in each Body field:
- Replace
SGPRJwith your target Jira project key. - Replace
SG-Riskwith your target issue type name.
- Replace
Tip: The project key is the prefix of the project's issue keys. For example, in issue SGPRJ-123 the project key is SGPRJ. Enter the issue type name exactly as it appears in Jira.
Choose how risks are forwarded
- Choose a forwarding mode:
- Automatic: Select Automatic sending mode. Optionally, add risk forwarding filters so only matching risks are sent, for example by severity, label, system type, or CI group.
- Manual: Leave Automatic sending mode cleared. Users send individual risks with Send to ITSM from the Risk view.
Tip: If you use automatic mode, start with a narrow filter, such as critical severity only. Without a filter, the first scan after you enable the provider can create an issue for every open risk.
Enable the provider
- Select the Enabled checkbox to activate the provider.
- Click Apply to save your changes.
Summary of values to replace
| Section | Field | Placeholder | Replace with |
|---|---|---|---|
| Authentication | User |
user@company.com
|
Email address of the Jira integration account |
| Authentication | Password | — | API token for that account |
| API Calls - Global | Host |
yourcompany.atlassian.net
|
Your Jira site host name |
| API Calls - Open, API Calls - Update | Body |
SGPRJ
|
Target project key |
| API Calls - Open, API Calls - Update | Body |
SG-Risk
|
Target issue type name |
| API Calls - Close (optional) | Body | Transition ID | Jira close transition ID. See Close Jira issues automatically. |
Verify the integration
Send one risk to Jira manually to confirm that the connector works:
- Go to Baseline Configuration > Risks and double-click an open risk.
- On the Activity tab, click Send to ITSM System and select Atlassian JIRA.
- In Jira, open the target project and confirm that a new issue was created with the expected issue type, summary, and priority.
If no issue appears, see Troubleshooting.
Keep Jira issues in sync
By default, StorageGuard only opens issues. You can also have it update and close them as findings change. Both settings are under Risk Handling in the provider settings.
Update Jira issues automatically
To update the Jira issue whenever the related StorageGuard finding changes, select Send Update Events.
Close Jira issues automatically
To close the Jira issue when the related StorageGuard finding is closed:
- Select Send Close Events.
- Under API Calls - Close, in the Body field, enter the ID of the Jira workflow transition that closes the issue.
Tip: Transition IDs are specific to each Jira workflow, and a transition is only listed if it is available from the issue's current status. To find the ID, run the following request against an issue that StorageGuard created, then use the id of the transition that moves the issue to Done or Closed. A Jira administrator can also find transition IDs in the workflow editor.
curl -u integration@company.com:<API_TOKEN> \
-H "Accept: application/json" \
"https://yourcompany.atlassian.net/rest/api/3/issue/SGPRJ-123/transitions"
Customize what StorageGuard sends to Jira
API call bodies
The Body fields in API Calls - Open, API Calls - Update, and API Calls - Close control which fields StorageGuard sends to Jira and what they contain. Click the (i) icon next to a field to see the template variables you can use.
Note: Any Jira field you add to a body, including custom fields, must be on the project's create or edit screen for that issue type. Otherwise, Jira rejects the request.
Priority and severity mapping
Use Priority Field Customization and Severity Field Customization to map StorageGuard priority and severity values to the values your Jira project uses.
Troubleshooting
| Symptom | Likely cause | Resolution |
|---|---|---|
| Sending fails with an authentication error (HTTP 401) | The email address or API token is wrong, or the token was revoked or has expired. | Re-enter the email address in User. Create a new API token and paste it in Password, making sure no spaces were copied. |
| Sending fails with a permission or not-found error (HTTP 403 or 404) | The integration account can't see the project or lacks permission to create issues. | Ask your Jira administrator to grant the account browse and create permissions in the target project. |
| Sending fails with a bad request error (HTTP 400) that mentions the project or issue type | The project key or issue type in the Body fields doesn't match Jira. | Check the values in API Calls - Open and API Calls - Update. Issue type names must match exactly. |
| Sending fails with an error that a field can't be set | A field in the body isn't on the project's create or edit screen. | Add the field to the screen in Jira, or remove it from the body. |
| Connection timeout or host not found | The Host value is wrong, or the master server can't reach your Jira site. | Check the host name format. Confirm that the master server allows outbound HTTPS to your Jira site, including through any proxy. |
| Risks aren't forwarded automatically | The provider isn't enabled, Automatic sending mode is cleared, or the filters exclude the risks. | Check the three settings in the provider, then click Apply. |
| Jira issues aren't closed when findings close | Send Close Events is cleared, or the transition ID is wrong or unavailable from the issue's current status. | Select Send Close Events and confirm the transition ID. See Close Jira issues automatically. |
[ Still need help? ]
If the integration still doesn't work, submit a request and include the error message and the HTTP status code, if shown.
Comments
0 comments
Please sign in to leave a comment.