Is the LDAP Azure AD link still active?

[guchegbu]

Is this link still active?

https://confluence.atlassian.com/adminjiraserver/connecting-to-an-ldap-directory-938847052.html

[Ed Letifov _TechTime - New Zealand_]

Hello, @guchegbu 

I believe what you mean is "is this link still describing a current feature".

Yes it is, but not for Cloud, but Server/Data Center instead.

Cloud products cannot be connected to LDAP directly. They can be connected to Azure AD though. However, Azure AD is not the same as on premises Active Directory (LDAP).

Please note you don't connect Jira to Azure AD, instead you integrate your whole organisation in Atlassian Cloud with Azure AD via Atlassian Access product.

When your users are trying to get into your Jira Cloud instance (or Confluence, or Trello, or this very Community), they are asked to login into Atlassian Cloud, once an email with your domain is entered, Atlassian Access takes over, and redirects to Azure AD to sign-in (via SAML), then sends you back to the original destination. 

Atlassian Access is also used for User Provisioning from Azure AD i.e. creating users and groups automatically.

See these answers I've given previously for some hints on how to configure your Atlassian Access with Azure AD correctly:

• https://community.atlassian.com/t5/Atlassian-Access-questions/Integrate-Azure-AD-with-Atlassian-Cloud/qaq-p/1852575
• https://community.atlassian.com/t5/Jira-Service-Management/Azure-AD-login-and-incoming-email-not-matching-up/qaq-p/1821809
• https://community.atlassian.com/t5/Confluence-questions/What-is-the-difference-between-site-access-and-product-access/qaq-p/1306257

Also this might be of help:

• https://community.atlassian.com/t5/Atlassian-Account-questions/SAML-SSO-with-Azure-AD-does-not-work-when-using-quot-Continue/qaq-p/2085502#M2218

[guchegbu]

Thanks for that answer.

My next question would be how would I transfer all my AD users to Atlassian Cloud.

For Example. I currently have 4 people in Jira for my company. And 200 users in Azure AD I would like to add to Jira so I can assign them assignments. 

Should I still follow these same steps to add those users to the Atlassian Cloud / Jira

[Ed Letifov _TechTime - New Zealand_]

@guchegbu 

As I've specified:

Atlassian Access is also used for User Provisioning from Azure AD i.e. creating users and groups automatically.

Please review the Atlassian page I've linked to: https://support.atlassian.com/security-and-access-policies/docs/understand-atlassian-access/

unfortunately it seems the links there are circling on themselves...

Here is the doco on Provisioning part with Access: https://support.atlassian.com/provisioning-users/docs/understand-user-provisioning/

But, yes, the answer is "if you want your Azure AD users to automatically get into Jira Cloud you need to claim/verify your email domain, clean up your users (e.g. remove everyone who still has an Atlassian account but has left the company, purchase Atlassian Access subscription and integrate with Azure AD for SSO and for User Provisioning)".

My recommendation would be to reach out to a Solution Partner to make this journey as smooth as possible. I represent TechTime, a New Zealand Platinum Solution Partner with Cloud Specialisation, but you must have someone nearby – check Partners Directory

If required we can help free of charge with cleaning up your Cloud users using our upcoming Cloud integration feature in our established Server/Data Center product – UserManagement for Jira, but this will require you giving us an admin access token – something that should not be treated lightly. Alternatively if you have a Jira Server/Data Center instance around you can run it yourself as a beta tester.