Jira Cloud
Configure Jira Cloud integration with RAD Security for automated security incident management.
This guide walks you through integrating Jira Cloud with RAD Security for automated security incident and ticket management, enabling you to automatically create, update, and track security incidents as Jira issues.
Jira Cloud provides flexible issue tracking and project management capabilities, making it ideal for managing security incidents, vulnerabilities, and remediation workflows.
Prerequisites
Before you begin, ensure you have:
- Admin access to Jira Cloud
- Ability to create users and groups in Jira
- Access to RAD Security workspace with integration permissions
Service User Recommended: Create a dedicated service user for this integration rather than using a personal account. This ensures the integration continues working when team members leave or change roles.
Step 1: Log in to Jira as Admin
Access Jira Admin
Log in to your Jira Cloud instance with administrator privileges
Navigate to User Management
Click the gear icon (⚙️) in the top right corner and select User Management
Step 2: Create Group for Integration
Navigate to Groups
Click on Groups in the left panel
Create New Group
- Click Create group
- Enter a group name (e.g., "RAD Security Integration")
- Add a description (optional)
Assign Product Access
In the Group product access section at the bottom:
- Select the product: User
- This grants: "Can access the product, with no product admin permissions"
- Click Save
This provides a simple, secure setup. Advanced users can configure project-based permissions for more granular control. Refer to Jira's documentation for details.
Configure Project Permissions (If Needed)
Depending on your Jira configuration, you may need to grant read and write access to specific projects:
- Navigate to Project settings
- Select the projects the integration should access
- Grant appropriate permissions to the group
This step is only necessary for certain product configurations. Consult Jira documentation for project-specific permission requirements.
Step 3: Create Service User
Navigate to Users
Click on Users in the left panel
Create New User
- Click Create user
- Enter user details:
- Email address - Use a service email (e.g.,
rad-security@company.com) - Full name (e.g., "RAD Security Integration")
- Password - Create a secure password
- Email address - Use a service email (e.g.,
Assign User to Group
In the lower part of the user creation panel:
- Find the Groups section
- Add the user to the group you created in Step 2
- Click Save
Service User Strongly Recommended: While you can use an existing user account, creating a dedicated service user is strongly recommended. If a personal account is used and that person leaves your organization, the integration will break.
Step 4: Generate API Token
Log Out and Log In as Service User
- Log out of your admin account
- Log in using the service user credentials you created in Step 3
Access Personal Settings
Click the gear icon (⚙️) in the top right corner and select Personal Settings (Atlassian account settings)
Navigate to Security
In the top menu, click on Security
Manage API Tokens
Click Create and manage API tokens
Create New Token
In the API tokens panel:
- Click Create API token
- Enter a label (e.g., "RAD Security Integration")
- Click Create
Copy Token
Immediately copy the API token that appears
This is your only chance to view the token! If you lose it, you'll need to revoke and create a new token. Store it securely in a password manager or secrets vault.
Token Rotation Best Practice: Rotate API tokens every 90 days as a security best practice. See Atlassian's token management documentation for more details.
Step 5: Configure in RAD Security
Navigate to your RAD Security workspace and configure the Jira Cloud integration with the following parameters:
Required Parameters
| Parameter | Description | Example |
|---|---|---|
| URL | Root URL of your Jira Cloud instance | https://your-company.atlassian.net/ |
| Username | Email address of the service user from Step 3 | rad-security@company.com |
| Secret | API Token from Step 4 | your-api-token-here |
The URL should be your Jira Cloud root URL in the format https://<tenant>.atlassian.net/ where <tenant> is your organization's Jira subdomain.
Verify Integration
After completing the setup, verify your integration is working:
- Navigate to Data Sources > Integrations > Ticketing in RAD Security
- Locate your Jira Cloud integration
- Check the connection status shows as Connected
- Test by creating a sample issue from RAD Security
Your Jira Cloud integration is now configured! RAD Security can now automatically create and manage security issues in Jira.
What Data is Synced
Once configured, RAD Security will sync the following with Jira Cloud:
Use Cases
Automated Ticket Creation Automatically create Jira tickets when security incidents, vulnerabilities, or policy violations are detected.
Workflow Integration Integrate security findings into existing development and operations workflows in Jira.
Remediation Tracking Track security remediation efforts through Jira's project management features.
Centralized Management Manage security incidents alongside other operational issues in a centralized platform.
Troubleshooting
Security Best Practices
Use Service Accounts Always use a dedicated service account with a service email, never a personal account tied to an individual.
Least Privilege Access Only grant the minimum permissions required. Avoid admin privileges for integration accounts.
Rotate Tokens Regularly Rotate API tokens every 90 days or according to your security policy.
Secure Token Storage Store API tokens in a secure password manager or secrets vault. Never commit to version control.
Monitor Integration Activity Regularly review issues created by the integration to ensure proper operation.
Audit Permissions Periodically review the service user's group membership and permissions.
Track Token Usage Document which tokens are used for which integrations to simplify rotation and troubleshooting.
Service Email Management Ensure the service email is monitored or forwarded to the appropriate team.
Token Rotation
To rotate your Jira API token:
Create New Token
- Log in as the service user
- Go to Personal Settings > Security > API tokens
- Create a new API token with a different label
Update Integration
Update the token in RAD Security integration settings
Verify Connection
Test that the integration still works with the new token
Revoke Old Token
Once verified, revoke the old token in Jira
Additional Resources
Jira User Management
Official Atlassian guide to user management in Jira
API Token Management
Learn how to create and manage API tokens