Jira Service Desk LDAP customers creation/management

[Keenan Verbrugge]

Does the Jira + Service Desk LDAP integration support creating/managing customers on LDAP?

We're trying to integrate user authentication for many separate services (Blesta, InvoiceNinja, Confluence+ServiceDesk, Discourse, etc.) and are wondering if Jira Service Desk's LDAP is able to create/manage Jira Customers or if there is a better solution?

Currently considering FreeIPA due to the wiki mentioning bi-directional sync functionality which I assume means being able to update passwords?

Edit: So I followed the wiki linked above and it was pretty accurate. Users/Customers created in LDAP are able to authenticate in Jira Service Desk, however, Jira Service Desk is not able to create users in LDAP due to the LDAP query being used to create a new user and I'm not sure how to solve this yet.

When using the Customer Portal signup form, the LDAP user created is using

'cn=test@example.com,cn=accounts,dc=mydomain,dc=com'

And the reason the above test@example.com is problematic is because the LDAP server doesn't allow user login names to be email addresses (it expects them to not contain the @).

Any idea if there's a better way of handling this?

Happy to provide any additional information and open to other suggestions!

[Andrew Laden]

If you are using Active Directory, then the app AD Attribute Sync has some post functions that can be used to create accounts in AD as part of a workflow.

https://marketplace.atlassian.com/apps/1212162/active-directory-attributes-sync?hosting=server&tab=overview

https://deviniti.com/support/addon/server/active-directory/latest/using-data-in-workflow-post-function-update-data/

[Keenan Verbrugge]

Updated post above with post-FreeIPA installation information