LDAP - Single group synchronization

[Stephan Schamberger]

We are interested to buy Jira Service Desk and have therefore set-up a small test system.
The system looks good so far, just the LDAP import seems to have some issues:

- Domain Users are not filled correctly: Means no user is part of this group and, if connected to multiple AD/LDAP environments, it's not fully clear which group belongs to which domain.

- It seems there is a group and/or user and/or memberOf limit. Don't know if this is true, maybe someone knows about this.

- Cause of many objects and groups withing AD/LDAP we thought about to have just one or two groups where alle the related user are memberOf. Currently I do not find any setting to set this up in Jira. So sync all users part of group xxx and assign them automatically this permission. This would mean service accounts and many other stuff would not be in the Jira system. 
Does anyone know if this is possible?

- If possible, is it possible to also synchronize members of this single group across AD forests (so different LDAP, but same user and permissions)?

Many thanks!

[Angélica Luz]

Hello Stephan,

Welcome to Atlassian Community!

When it comes to LDAP integration, this option is currently only available for Server and Data Center.

There is a feature suggesting support for LDAP in Cloud as well:

• Support LDAP integration with Cloud

Please, click on vote and watch to receive updates.

On Cloud, you can subscribe to Atlassian access and use SAML SSO. The identity providers currently supported are AD FS, MS Azure AD, Google Cloud, Idaptive, Okta, and OneLogin.

For more information, please check the links below:

• Scale your Atlassian cloud products with confidence 
• Atlassian Access security policies and features
• SAML single sign-on

Also, since you are using Jira Service Desk Free, the number of agents are limited to three, so it's important to disable the product access for users to be imported and then you can choose who will receive a license. 

Go to Cog Icon > User management > Product access and disable Jira Service Desk, so new users won't receive the default group.

If you have any other questions regarding this matter, please let us know.

Regards,
Angélica