Configure your Jira instance based on the type of your deployment:

| Deployment Type | Cloud ID | Server URL |
|-----------------|----------|------------|
| Jira Cloud | Cloud ID of your Jira instance (See below) | `https://api.atlassian.com/ex/jira` |
| Jira OnPrem | Leave empty | Your Jira server URL |

##### Cloud ID

1. Go to your [Admin page](https://admin.atlassian.com/).
2. Click the **Apps** tab on the top banner and choose the appropriate site under **Sites** on the left side bar. Your Cloud ID will appear in the URL:
`https://admin.atlassian.com/s/{cloud_id}/users`

#### Authentication Methods

There are 2 authentication methods:
- **Basic Authentication**
- **OAuth 2.0**

### Basic Authentication

Leave the *Client ID* and *Client Secret* fields empty and fill in the following fields:
- *User name* - Enter your user email.
- *API key* - Enter the API token. To generate an API token, see [here](https://support.atlassian.com/atlassian-account/docs/manage-api-tokens-for-your-atlassian-account/)

##### Basic Authentication permissions

Ensure that you possess the necessary permissions by navigating to **Project Settings** > **Permissions** in the project.
Locate permissions for the tasks listed below:
* Browse projects
* Create issues
* Edit issues
* Delete issues
* Transition issues
* Create attachments
* Add comments
* Link issues
### OAuth 2.0

For both instances (Cloud ID & OnPrem), use the `https://oproxy.demisto.ninja/authcode` **Callback URL**. The OProxy URL is a client side web page that provides an easy interface to copy the authorization code from the response to the integration configuration during the authorization flow. Optionally, if you don't want to use the OProxy URL, you can use a localhost URL on an unused local port, for example: <http://localhost:9004>. You will then need to copy the code from the URL address bar in the response.

#### Cloud authentication

Go to your [Developer console](https://developer.atlassian.com/console/myapps/) page, and choose the App you want to integrate with your instance. It must be of type OAuth 2.0. For creating a new app with type OAuth 2.0, click **Create** and choose **OAuth 2.0 integration** and follow the steps.

##### Callback URL

1. Go to the **Authorization** tab, and click **Add** on the authorization with type of OAuth 2.0 (3LO).
2. Insert a **Callback URL**.

##### Client ID, Client Secret

1. Go to the **Settings** tab.
2. Copy the **Client ID** and **Secret** to the Client ID and Client Secret fields, respectively.

##### Cloud Scopes

The integration uses the *offline_access* scope, in order to retrieve refresh tokens.

###### Classic Scopes

* read:jira-work
* read:jira-user
* write:jira-work

##### Granular Scopes

* read:jql:jira
* read:issue-details:jira
* write:board-scope:jira-software
* read:board-scope:jira-software
* read:sprint:jira-software
* read:epic:jira-software
* write:sprint:jira-software

#### OnPrem authentication

1. Log in to Jira as a user with `Jira Administrator` permissions.
2. Click the Jira Administration tab (the gear icon found in the top right corner) and click **Applications**.
3. To create a new `Application link`, which will be used to integrate Cortex XSOAR with Jira:  
    a. Click **Application links** under `Integrations`, found on the left side menu.  
    b. Click **Create link** and choose **External application** with the **Incoming** direction.  
4. Fill in the required details as explained in the page, by inserting a `Callback URL`, and choosing the permission `Write`.
5. Once the link is created, you will be able to see `Client ID`, and the `Client secret`, which are required in the configuration screen. Copy these values and paste them into the respective fields in the configuration screen.

##### OnPrem Scopes

Write