Crowd: migrate Active Directory to new usernames

Question

Hello,

we currently use Crowd to manage users that come from various directories, both internal crowd directories and external LDAP.

Now we have to move our main active directory to a new active directory, sadly with new usernames.

Would anyone have any suggestion on what's the best way to do such a migration?
Obviously all the content and history in the connected Jira and Confluence instances should be retained. At best our users shouldn't even notice the change, besides the new username.

Greetings,
Michael

Michael Bachmann · Answer

Yes it did work in the end although it certainly was a hassle.
The synchronizations to Jira and Confluence inbetween these steps are the key to make it work and have to be in a very specific order and it's also better do disable periodic synchronizations in the meantime.

I also have to give a fair warning on this approach!
Only later we have found some users (~2-3 out of 140) where the "user id" (NOT the "user key") was the mail address instead of the generic "JIRAUSER123". I'm not entirely sure how that came to be.
This does create some issues when using various APIs to integrate Jira/Confluence with other applications.

You should definitely test this several times in a test environment and check all the data.

So if i recall correctly (I hope) my final approach was as follows:

* import all old users from the active directory into an internal crowd directory (using a .csv file)
* remove the old active directory
* synchronize to Jira/Confluence and check if everything still works!
* rename the old users to the new usernames in the internal crowd directory
* synchronize to Jira/Confluence and check if everything still works!
* add the new active directory
* remove the internal crowd directory
* synchronize to Jira/Confluence and check if everything still works!

khalil Mishal · Answer

@Michael Bachmanndid that work for you?

Mirek · Answer

Then you might try simply changing username on old Active Directory (to the new one) then migrate to new Active Directory.