Use crowd in Jira only for authentication while having groups and roles managed internally in Jira

[Gaurav Tiwari]

Hi,

I want to configure JIRA authentication from AD using Crowd. I need Crowd to only authenticate user credentials from active directory while the groups and roles should be managed internally by JIRA. This is because I have read only connection to Crowd and cannot update roles or group information in Active directory using Crowd. Please advise if this can be done or the only available option is to use option "internal with LDAP authentication" while creating user directory.

Thanks

[Marcus Silveira · Accepted solution]

Hi Gaurav,

I believe the best way for you would be to set the AD connection on Crowd as 'Delegated Authentication' and set an 'Atlassian Crowd' User directory on JIRA to connect to Crowd.

You'll set the AD/Crowd connection as read-only and only get the users, and the Crowd/JIRA connection as read/write in order to be able to handle the groups in JIRA.

You can find more information on the Crowd and JIRA User diretories here

https://confluence.atlassian.com/display/CROWD/Adding+a+Directory

https://confluence.atlassian.com/display/JIRA052/Configuring+User+Directories

Hope this helps,

Marcus

[Gaurav Tiwari]

Thanks a lot, that works fine !!!