Take findings all the way from an encrypted Jira connector to single and bulk push, governed field mapping, a safe dry-run, and webhook status sync back.
This guide walks you through wiring PMAP to Jira Cloud or Server so triaged findings become real remediation tickets. You learn how PMAP models a Jira ticket on a finding, how to store credentials encrypted at rest, and how to use the project, issue-type, custom-field, and form-template pickers to build a payload that matches your Jira workflow.
It is written for security and remediation owners who escalate work to engineering teams. By the end you can push a single finding in standalone, subtask, or link mode, configure severity-to-priority and status-to-status mapping rules, bulk-push up to 500 findings at once, and track every ticket from the org-wide Tickets workbench while closure syncs back automatically.
Inside this guide
- Create the Jira integration and keep every credential encrypted at rest.
- Test the connection and confirm account permissions before you rely on it.
- Pick the project, issue type, and custom fields that fit your Jira workflow.
- Push a single finding in standalone, subtask, or link mode and verify the ticket reference writes back.
- Configure severity and status field-mapping rules, then preview them with a dry-run.
- Bulk-push up to 500 findings in one governed call.
- Register the inbound webhook for status sync and operate the org-wide Tickets workbench.
Before you start
- A PMAP account with permission to create and edit integration records and to read and edit findings in your scope.
- A Jira account, Cloud or Server, that can browse projects, read custom fields, transition issues, and create issues.
- At least one triaged finding or a filtered scanner-import selection ready to escalate to a remediation owner.
- Two-way network reachability for the webhook step, or a manually registered webhook URL on an on-premise deployment.
- Team agreement on the target Jira project, issue type, and priority scheme so your mapping rules encode a real policy.
