> ## Documentation Index
> Fetch the complete documentation index at: https://docs.backline.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Jira Integration (App)

> Sync vulnerabilities and remediations with Jira tickets using a Jira APP — no API token or service account required

## Overview

Link your Jira projects to automatically create and update issues based on Backline Vulnerabilities and Remediations. This integration uses Jira's OAuth 2.0 (3LO) flow — you authorize Backline directly from your Atlassian account without creating a service account or generating an API token.

<Note>
  Backline supports Jira Cloud only. If you prefer to use an API token instead, see the [Jira (API Token) integration](/integrations/jira).
</Note>

## What You Can Do

With the Jira integration, Backline can:

* Automatically create and update Jira issues for vulnerabilities
* Update tickets when pull requests are opened for remediation
* Update tickets when pull requests are merged and remediation is resolved
* Add Jira ticket references to associated pull request descriptions
* Track remediation work in your team's existing workflow

## Prerequisites

Before connecting, ensure you have:

* A Jira Cloud instance
* Permission to authorize third-party apps in your Atlassian account

## Connecting Jira

<Steps>
  <Step title="Navigate to Integrations">
    In Backline, go to the Integration Hub from the main menu.
  </Step>

  <Step title="Select Jira (App)">
    Find and click on the **Jira (App)** integration card.
  </Step>

  <Step title="Authorize with App">
    Click **Connect** to start the Jira App (OAuth) flow. You'll be redirected to Atlassian to review and approve Backline's requested permissions.
  </Step>

  <Step title="Approve Access">
    On Atlassian, select the required site, review the permissions and click **Accept** to grant Backline access to your Jira site.
  </Step>

  <Step title="Return to Backline">
    Once authorized, Atlassian redirects you back to Backline. Your session is now linked securely — no token storage on your end.
  </Step>
</Steps>

## Configuring Projects

After connecting, configure which Jira projects Backline should use:

<Steps>
  <Step title="Open Project Management">
    From the Jira (App) integration card, click **Add Projects** (shown after connection) or open the card and go to the Management tab.
  </Step>

  <Step title="Select Jira Project">
    Choose a Jira Project from the list of available projects in your connected site.
  </Step>

  <Step title="Choose Issue Type">
    Select the issue type you want Backline to create or update for vulnerability tickets.
  </Step>

  <Step title="Map Fields">
    Once the issue type is chosen, the list of mandatory and optional fields from Jira will appear. Map each Jira field to one of the following:

    * A value from Jira
    * A field from Backline
    * A manually added value

    **Important**: Special fields such as Severity and Priority must be mapped to internal Backline fields.
  </Step>

  <Step title="Save Configuration">
    Complete the field mapping and save your project configuration.
  </Step>
</Steps>

## Automatic Updates

Once a scanned vulnerability is associated with a Jira ticket, Backline will automatically:

* Update the ticket when a pull request is opened for remediation
* Update the ticket when the pull request is merged and remediation is resolved
* Add the Jira ticket reference to the associated pull request description

## Managing the Integration

### Managing Projects

To view and manage your connected Jira projects:

<Steps>
  <Step title="Open Project Management">
    From the Jira (App) integration card, click the **three dots menu** and choose **Manage Projects**.
  </Step>

  <Step title="View Connected Projects">
    You'll see all connected Jira projects listed.
  </Step>

  <Step title="Edit or Delete">
    For each connected project, you can:

    * **Edit** the configuration to modify field mappings or issue types
    * **Delete** the project to remove the connection
  </Step>

  <Step title="Add More Projects">
    Click **Add Project** to configure additional Jira projects.
  </Step>
</Steps>

### Revoking Access

To revoke Backline's access to your Jira account:

1. Disconnect the integration from the Backline Integration Hub
2. Optionally, revoke the app from your [Atlassian Connected Apps](https://id.atlassian.com/manage-profile/apps) page

<Tip>
  Connect a messaging integration like Slack to receive notifications if there's an issue connecting or updating a ticket during the remediation process.
</Tip>