Setting up AD LDAP connection to Jira with existing database

[Adam Colliss]

Hi

We are currently running a Jira site using the internal user database, however we wish to switch to SSO using our internal AD database for authentication to Jira.

We intend to follow the following steps-

Setup LDAP connection

Set LDAP database username fields to match existing Jira database (ensuring that the internal database is hit first for authentication)

After testing, switch order of databases so LDAP is hit first.

From what we have read, this should keep all the existing internal users rights and data when we make the switch to LDAP authentication?

Can anyone confirm and are there any gotchas to look out for when doing this?

Thank you!

[Tom Lister · Accepted solution]

Hi @Adam Colliss 

I've worked this way in several Jira instances. As long as the user names are the same they will be accessed using the first User Directory that finds a match. Long term I would advise removing the users from the internal directory to avoid confusion.

Regards

Tom

[Tom Lister]

"If you have the same user in multiple directories, the effect of directory order will apply. This means that if you add a new user directory and then change the order, so it is before your existing directory, your users will be selected from that directory first."

https://confluence.atlassian.com/adminjiraserver073/migrating-users-between-user-directories-861253207.html

[Adam Colliss]

Many thanks for the reply, does anyone know the IPs or range of IPs that Jira will use to contact our AD over LDAP so we can open the Firewall, or is it the same range as the Jira Cloud?

Thanks

Adam