How do I go from AD authentication to Jira Authentication

Question

We are currently using AD for authentication, for security reasons I would like to move to internal authentication and not end up with a hybrid that still leaves the security risks.

So what I want to do is turn off AD authentication, not loose the user accounts, turn on authentication within Jira.

Helpdesk Helpdesk · Answer

Tim,

We setup JIRA with AD from the start

We have trainers that need access to JIRA while in the field and don't have a VPN setup yet.  We don't want to be vulnerable to a hack using AD over the web.

Tim Eddelbüttel · Answer

If you really want to do this, make sure that you have in booth user directories the same usernames!

Did you switched before from internal to AD or started you with AD? Your groups are managed in JIRA or AD?

* Export your existing users from cwd_user in a CSV file (username, first name, last name,  mail)
* Export your existing memberships (https://confluence.atlassian.com/x/qwc_EQ)
* Check that you have a working admin user in your internal directory

If your not familar how to export these data, take a look at the Crowd Docs (https://confluence.atlassian.com/x/UIdcGg) and change the MySQL query to your needs. It's nearly the same.

Download the JIRA CLI (https://bobswift.atlassian.net/wiki/display/ACLI/Downloads) and play with your exported data on a testing environment.

Just out of interest, could you explain what you mean with security reason on your AD?

Rodrigo Rosa · Answer

Hello!

You may use this https://confluence.atlassian.com/display/JIRA/Migrating+Users+between+User+Directories document as reference to migrate all users to JIRA internal.

Regards,

Rodrigo Rosa