Bitbucket Cloud

Setting up the Bitbucket Cloud authentication in your SonarQube Server 2026.5 instance.

To allow users to log in with Bitbucket Cloud credentials, you need to use an OAuth client and set the authentication settings in SonarQube Server. See the following sections for more on setting up authentication.

Setting your OAuth client settings

Create your OAuth client in your Bitbucket Cloud workspace settings and specify the following:

• On the Details tab, Name: The name of your OAuth client.
• On the Authorization tab:

  • Supported grant types: Select Authorization code.
  • Callback URLs: <Your SonarQube Server URL>/oauth2/callback/bitbucket. For example, https://sonarqube.mycompany.com/oauth2/callback/bitbucket.
• On the Scopes tab:

  • Account: Read and Email access.
  • Workspace membership: Read access.

Setting your authentication settings in SonarQube Server

To set your global authentication settings, navigate to Administration > Configuration > General settings > Authentication > Bitbucket Cloud authentication and update the following settings:

• Enabled: Set to true.
• OAuth consumer key: Enter the Client ID of your OAuth client in Bitbucket Cloud.
• OAuth consumer secret: Enter the Secret of your OAuth client in Bitbucket Cloud.
• Allow users to sign up: enable to allow new users to authenticate. When disabled, only existing users will be able to authenticate to the server.
• Workspaces: Only users from Bitbucket Workspaces that you add here will be able to authenticate in SonarQube Server. This is optional but highly recommended to ensure only the users you want to log in with Bitbucket credentials are able to.

If the allowed workspaces are not entered, any user with a BitBucket account can log in to the SonarQube Server instance, assuming Allow users to sign up is set to true.

Bitbucket Cloud group synchronization

Group synchronization is not supported for Bitbucket.