My company, as well as many others, does not want to open ports in the firewall to connect to Jira. We use EAA as our protection in front of our on-prem Jira. Aha! supports OAuth to Jira, which is ok but we still need cert-auth in front of that to even reach our on-prem instance and we would not be willing to remove or downgrade that protection
The status of this idea was out of date. Our Jira 2.0 integration (and other 2.0 integrations) now support certificate based authentication. This article explains how to set this up in more detail.