Create
cancel
Showing results for 
Search instead for 
Did you mean: 
Sign up Log in

Azure sync users being removed from confluence-users group

Damien Harley
I'm New Here
I'm New Here
Those new to the Atlassian Community have posted less than three times. Give them a warm welcome!
September 18, 2019 edited

Hi guys,

When I sync users from Azure, they are showing as 'User is read only'

They are not automatically added to the confluence-users group.  You can momentarily add them but after a short time they are removed from the group and no longer have access.

I'm using the SAML SSO Plugin, with the User Update Method set to "Update with UserSync-Connector"

 

**update** group membership is being removed by the UserSync

Has anyone else had the same issue?

Thank you.

1 answer

1 accepted

1 vote
Answer accepted
Christian Reichert (resolution)
Rising Star
Rising Star
Rising Stars are recognized for providing high-quality answers to other users. Rising Stars receive a certificate of achievement and are on the path to becoming Community Leaders.
September 19, 2019

Hi Damien,

by default the Usersync connector will see AzureAD as the "master" and remove the User from all the groups where is not part of in AzureAD.

So one possible solution for you is to have a group like confluence-users (can be a different name) in AzureAD.

If that's not what you like, then you need to tell the connector which groups it should treat as "local groups". Essentially leave the User in the "local groups" even though they are not present in AzureAD.

You can do that via User Sync -> Edit the Azure AD connector you created.
Then -> Show Advanced Settings.

Scroll down to -> Local Group Management. Under -> Keep these Groups click -> Add one

Afterwards add confluence-users to there. This will mean the connector will never remove a User from this group. You can also use regular expressions instead - so something like confluence-.* would treat everything that starts with confluence- as a local group and leave it alone.

You also said:

They are not automatically added to the confluence-users group

If you would like to add every User the connector syncs to be added to the confluence-users group, then you can use the following setting.

Local Group Management. Under -> Always assign these groups click -> Add one and then add all the groups you want assigned to every User here.

Hope that helps!

You can also always schedule a Screenshare session with us, if you like to discuss this in more Detail. https://resolution.de/go/calendly

Cheers,
Chris

P.S. Full disclosure, I work for resolution, a marketplace vendor.

Suggest an answer

Log in or Sign up to answer
TAGS
AUG Leaders

Upcoming Confluence Events