How to make use of the active user when deleted in the primary user directory?

[Karsten Scheunemann]

Hello all,

we have connected two user directories in our Jira (DC), one is Crowd (prio 1) and one is Active Directory (prio 2).

A user is usually only in one directory, but we have issue when a user was moved from one (Crowd) to the other (AD) directory. Means the user get deleted in the Crowd and exists in AD, with same username and email.

In Crowd the user was recognized as deleted and synchonized as deleted to Jira.
But the user exists as active in AD and in the Jira database (cwd_user) there two entries with the username, of course with different directory_id's, the first of crowd as active=0 and deleted_externally=1, the second from AD is active=1 and deleted_externally=0.

What we need to do, that Jira make use of the active entry instead of the deleted one?
Changing the order of the directories will cause other issues, as Crowd need to be primary first.

Thanks and best,
Karsten

[Humashankar VJ]

Hi @Karsten Scheunemann 

Firstly, trigger a full synchronization by editing the Active Directory (AD) configuration in Jira Administration > User Management > User Directories. Make a minor adjustment, such as tweaking the sync interval, and save changes. Otherwise, deactivate and reactivate the affected user through Jira's user management interface, which should update their AD entry.

Another option is to temporarily adjust the directory order, placing AD above Crowd, and perform a full resync. Then, restore Crowd to its original position. It's essential to utilize Jira's built-in user management tools instead of manipulating the database directly.

Ensure synchronization settings are correctly configured for both Crowd and AD directories, checking for conflicting settings. Consider configuring Crowd as the directory manager for both Crowd and AD users to maintain consistency.

 Before implementing these solutions, test them in a non-production environment and backup your data. By using Jira-supported methods, you can resolve user conflicts without compromising database integrity or support.

Also, directly modifying the Jira database is not recommended and can lead to support issues

Hope this helps - Happy to help further!!
Thank you very much and have a great one!
Warm regards

[Karsten Scheunemann]

Hi @Humashankar VJ 

Unfortunately nothing of these actions helps.
As soon i change the order back, with Crowd is on first position, the users gets marked as deleted again.

In my opinion, we need to remove the assignment of the deleted entry somehow, but i guess this will affect some settings of the user profile as well?

Best,
Karsten

[Humashankar VJ]

@Karsten Scheunemann 

Removing the deleted entry's assignment is a good idea, however - consider the following potential risks before proceeding.

This action may impact user profiles, particularly those linked to the Crowd directory, affecting specific settings. To mitigate risks kindly ensure backup of all user data. Furthermore, review and potentially reassign permissions and group memberships to maintain data integrity

Best Regards