Active Directory Migration and User transfer

[Alexander Vogl]

Hi,

we do have the need to change our active directory. Therefore we will move User from old domain to new domain. In this case user Names will remain the same. For testing I started migration with one user. This one user was deactivated in old Domain and activated in new Domain. I added the new AD in Jira User Management and executed synchronization. The test user is now striked out in Usermanagment. Unfortunatelly I can't get any connection to the new Domain user. This user is also not shown in the user directory by jira. New Users in new Domain are shown.
So is there a best practice for this work or procedure how to get users old to new usere assigned ?

[Andy Heinzer]

When you have multiple user directories in Jira and each has users by the same name, only the user account in the top ordered directory in Jira can actually login to Jira.

So in your case, since the usernames are all the same, I suspect you added this 2nd directory below your first one.  Hence, since that first account has been deactivated in AD, when Jira Syncs to that first AD server, it found the account exists, but has been disabled in AD, which in turn will prevent that user from being able to login to Jira.

I don't know the exact order of your directories in Jira, but I suspect that you can re-order the user directories in Jira so that the new directory is above the old one.  This way when that user tries to login to Jira it will only use the credentials from the new directory.   This is explained in more detail in Managing multiple directories.

Try this first.  If the user can still not login to Jira, check to make sure that this user account in the new directory is being granted application access in Jira.   It is a common problem to see that the new account might not transfer all the exact same group names as the old directory which in turn can mess with the memberships when making a user account migration like this.