nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

Confluence Azure Ad groups maping

Frédéric Grégoire

Hello,

A customer wants to test Confluence server in Azure... I have found the Microsoft tutorial to enable Azure AD SSO but don't understand how to map Azure AD groups to confluence groups. Can I add a Directory from the users administration page or Should I use Crowd ?

Can someone help me or redirect me to the relevant documentation ?

Regards,

Fred

Accepted answers

All comments

jira guy_ymfmzd

confluence server doesn't really support SSO with Azure unless you are using data center version. Also, crowd doesn't help with SSO redirect. You need SAML plugin for Confluence which should solve your use case.

We use this plugin https://marketplace.atlassian.com/apps/1212129/saml-single-sign-on-sso-confluence?hosting=server&tab=overview

which works great!

Lokesh Naktode_miniOrange

Hi @Frédéric Grégoire ,

There multiple SSO plugins available for Confluence on the Atlassian Marketplace which allows you to enable SSO into Confluence from Azure AD.

Here is one of the plugins that work on SAML2.0 Protocol.

https://marketplace.atlassian.com/apps/1215542/single-sign-on-sso-confluence-saml?hosting=datacenter&tab=overview

This plugin also has a feature you are looking for i.e. Group Mapping which allows you to map the Azure AD's group to Confluence local groups, and groups of the users in Confluence will be updated on each SSO(login) based on the group information received in the SAML Response from Azure AD.

Docs to setup SSO: https://plugins.miniorange.com/saml-single-sign-sso-confluence-using-azure-ad-idp

Feel free to reach out to support team through the customer portal in case if you need any assistance to set up the plugin for your use case.

Thanks,

Lokesh

I work for the miniOrange. One of the top SSO vendor in the Atlassian Marketplace,

Frédéric Grégoire

Hi Jira Guy,

We already have experience with SAML plugin which indeed works fine.

My issue is more about how to proceed with group mapping.

Thank you for your reply

Frédéric Grégoire

HI Lokesh,

Thank you for the information, I will have a look at miniOrange.

Regards,

Fred

Lokesh Naktode_miniOrange

Hi @Frédéric Grégoire ,

Great. Feel free to drop an email at atlassiansupport@xecurify.com or reach out through our customer portal in case if you need any assistance with the plugin setup for your use case(group mapping).

Thanks,

Lokesh

jira guy_ymfmzd

Did you try their user sync option? They have Azure AD connector and in the advanced section they have the option to configure groups. Check it out

Jon Espen Ingvaldsen Kantega SSO

Hi @Frédéric Grégoire

You can setup AzureAD to send group memberships as parts of the SAML response messages. It is a bit work to get AzureAD to send readable group names but we have created a document describing how to achieve this: https://docs.kantega.no/display/KantegaSSOEnterprise/Managed+and+Default+groups

With managed SAML groups, users are assigned and removed to groups based on the group settings at the identity provider (in your case AzureAD).

Another alternative to get permission updates each time the user logs in is to setup synchronized user directories. With this approach you set up a background job which continuously keeps Confluence up to date on users and group permissions from AzureAD. You can read more about this alternative here: https://kantega-sso.com/provisioning/

Full disclosure: I work for Kantega SSO, and our apps support both managed groups and synchronized AzureAD directories. Our support team is available if you want a demo or have any questions.

Regards,
Jon Espen
Kantega SSO

Welcome!

It looks like you're new here. Sign in or register to get started.

Quick Links

Find more posts tagged with

confluence

server

confluence-server