We are using Azure AD for our authentication method. We have a sync that automatically runs every hour. How do we manage the user that the automated sync connects as?
What are you specifically using to sync? If you are using Atlassian Guard then this connection is managed through the Azure app registration.
Could you elaborate a bit more in detail how your setup is configured?
We are using Guard and are syncing the users and groups from Azure AD. The Sync process runs in the background. How do I change the user that authenticates to Azure to synchronize those users and groups via the automated process?
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
Hi @Edward Moxley ,
Great! Guard the normal way of doing this so plenty of documentation there.
Provisioning from Entra ID to Atlassian doesn't really use a specific user. To configure the synchronisation, a enterprise app was configured in your Azure portal.
Part of that configuration generates several id's/client/secret/.. which are entered in the identity provider configuration on the atlassian admin hub.
In return, Guard generates an API token which is entered in the Azure app. This sets up the sync.
So in short, no real user is used to sync but it runs through an enterprise app.
More details can be found:
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
That all makes sense and was how I thought it worked. However, when the Entra admin downgraded my permissions in Entra, the automated sync stopped working. When he restored my permissions, the sync started working. Which leads me to believe that somewhere, my id is tied to the sync.
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.