Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.
Table of Contents
maxLevel3

Hello! This guide will take walk you through all the configuration necessary to setup JEMH for Jira Cloud (JEMHC). This configurations to achieve the best Jira email integration possible. The process will take 20-35 minutes, depending on what the specific features you needrequire.

Prerequisites

...

...

JEMHC does not support Atlassian Cloud default Mailboxes at all. Atlassian does not support 3rd party usage and periodically rotates the credentials in any case.

In order to successfully complete this guide, you will need the following:

  • An active Jira Cloud instance that you have administration rights for

  • For To process inbound email processing:

    • A valid Jira project

    • An external (non-Atlassian) mail source, for example a POP or IMAP server visible by JEMHC - Setup JEMHC Inbound mail (typically through a cloud provider like O365, Microsoft 365 or Gmail, but could be your own).

  • For To send outbound email notificationnotifications:

    • An external (non-Atlassian) SMTP mail server.

Info

JEMHC does not support Atlassian Cloud default Mailboxes at all. Atlassian does not support 3rd party usage and periodically rotates the credentials in any case.

Installing the app

First, we will show you how to install JEMHC on your Jira Cloud instance. Open the Apps drop-down menu from the top Jira navigation bar. Click Find new apps.

...

On the app search screen. Search , search for the term 'JEMH using the search field provided'. In the search results, you should see Enterprise Mail Handler for Jira (JEMH). Clicking the search result item will show you a Marketplace listing for the app.

...

Click the Try it free button to begin an evaluation of the app. Atlassian will then ask for confirmation.

...

After confirming, JEMH the app will then be installed. This could take a minute so please wait!

...

Once installation is complete, use the Get started link to open JEMH Cloud startup wizard, which will assist you with creating a basic configuration.

...

Setup inbound mail processing

If your mail server has a firewall or other IP based security, you may need to configure it to allow the app’s public IP address so we can access your mail servers:

  • JEMH Cloud public IP address : 54.210.55.45

...

First, if your services are using IP-based security measures, make sure all relevant IP addresses used for outbound connections are allowed access.

Next we will configure JEMHC to process emails retrieved from an incoming mail server. Firstly, we will select a project that emails should create issues in. Later on you can add additional projects to the configuration - this is just for initial set up. You will also be asked for an issue type.

...

Next, we’ll set up our inbound mail server connection. Selecting Create new message source will allow you to specify your connection settings. Alternatively, if you’re connecting to a Google or Microsoft email account via OAuth, you can use the respective sign in buttons. See Integrate Integrating with Gmail using OAuth and Integrate Integrating with Microsoft 365 using OAuth for more information.

...

For the purposes of this guide, we'll select Create new message source and connect to an example POP3 mail server. JEMHC provides some standard presets. You can choose Custom to pick your own specific hosts and ports, but it's on you to ensure it's correct!

...

Expand
titleCreate Message Source configuration assistance

Setting

Description

Name

Name of the message source

Type

Message source type

Preset

Presets which can be used to simplify the remaining configuration i.e. Host/Post

Host

Message Server's hostname or IP Address

Port

Message Server's port

Timeout

Connection to be timed out based on the configured time (seconds). Leaving this configuration blank would result the timeout to be 30 second

Username

Username to access the account

Password

Password to access the account

SSL

Does the connection use SSL?

SSL Certificate Validation

SSL Certification Validation

Check Server Identity

RFC 2595 specifies additional checks that must be performed on the server's certificate to ensure that the server you connected to is the server you intended to connect to. This reduces the risk of 'man in the middle' attacks.

Read Strategy

Read Unread and Mark As Read - Only the unread emails in the mailbox are to be processed and once read, they will be flagged as read (Default). 

Read All and Delete - All the emails in the mailbox will be read and deleted after they are successfully processed.

NOTE:

  • You should be fully aware of the changes you make when switching between strategies as it can potentially impact your allowance.

For example: UserA has been using Read Unread and Mark As Read read strategy for past 5+ months and currently has over 2000 emails residing in the inbox. However, the user has now decided to switch the read strategy over to Read All and Delete and the consequence of this turned out that all the mails residing in the inbox folder were processed by JEMHC which resulted to exceeding the allowance. 

  • Potential impact - POP Mail Server configuration may override the instructions given by JEMHC.

For example: read strategy (in JEMHC) has been set to Read Unread and Mark As Read and the Mail Server (POP) has been configured to Delete Gmail's copy once it has been processed. The end result of this would be the processed mail will be deleted from the inbox as per configuration.


...

In order to support email integration for users with no Jira user account, JEMHC needs to store email addresses in custom fields. Select what custom field is used to store a non-Jira email sender's name and address. You can also choose what where additional user email recipients (CC and BCC) are stored.

...

(warning) Owing to choices Atlassian made long ago, the default readonly “Email Participants” field created by the app (should be a TEXT type) was implemented by Atlassian as a single line field, this may impact you if more than a handful of email-only ‘additional recipients’ would be involved. If you plan to use this feature extensively, you should pre-create another “Email Participant Addresses” field or similar that is of type text multi-line, then, in the wizard, pick that instead of the bundled field that is limited to 255 chars.

...

If you see a warning that a field isn’t present on the projects issue screen (as above), click the link in the message. You will then be able to associate the field with the appropriate screen related to your project

...

Outbound mail configurations are found under Messaging > Message OutboundOutbounds:

...

Until the mail server setting has been used, its status will be 'unknown'.  To validate this, use the poll action to test ping action, loacated under the more actions icon. Here, the outcome is that the SMTP server is now Online (this would have happened anyway on first actual usage):

...

Using JEMHC for Notifications

The configuration for controlling what Jira Projects will drive notifications is accessed through Notifications > Notification Mappings > Issue:

...

Email:

...

Disabling Jira Notifications to stop duplicates

Software Projects

Jira Software Notifications need disabling, typically done by deselecting the project Notification Scheme, leaving JEMHC to take over. There are variations, eg leave Jira to do Jira notifications, use JEMHC to do email only user notifications.

Here is an example Project > Notifications with no scheme set:

...

JSM Projects

Service Management projects have both Jira (agent) notifications and customer level notifications. Disable the Project Notification Scheme to stop Jira user notifications, and deselect the Customer notifications (per event) to prevent customer notifications, to leave JEMHC in charge of notifications:

...

Testing outbound notifications

Recent outbound notifications can be reviewed through: Auditing > Outbound Messages, you can see the two ping messages already sentoutbound message configuration tests sent using ping.

...

The Auditing > Events view shows the webhook events sent by Jira, and indicates whether they were handled or not.  Commenting on the 'test' issue created earlier  Any Jira issue actions that trigger events matching the selected notification mapping(s) will be shown quite soon in the Events view:

...

Soon Shortly after that (about a minute) the notification will be sent, shown in the updated Outbound Messages view:

...

sent. The audit report for the sent outbound notification can be found in the Auditing > Outbound Messages view (The same location the outbound message ping configuration was found):

...

By default JEMHC will track all recent inbound and outbound notifications, retaining content of email in full in encrypted form within the database, for all Projects scoped in your notification mappings.  At your option, you can opt-out of this retention, but diagnosing any formatting or processing issues will be much harder!

...

The Workaround User is required in order to lookup users, and to do some configuration time validation of some settings, such as validating a user is assignable in a project.  

  1. The credentials supplied in JEMHC > Workarounds > User Lookup must have the Jira Global Permission BROWSE_USER, inherited through a group membership.

  2. The related user must also be in the Administrator role in the project, typically, this would mean a user in the administrators group.

  3. The related user must also have Application Access in order to look up issues in the Lookup User Tester.

When everything is valid, setting a Username and a test Project, will result in confirmation:

...

See Workarounds for how to generate an API token.

About Atlassian ID

Users created within Jira Cloud must now be validated as real users, this means that a valid email address will need to be provided during user creation. To create a user for the workaround user for example, follow the steps below:

...