Azure sync users being removed from confluence-users group

Damien Harley

Hi guys,

When I sync users from Azure, they are showing as 'User is read only'

They are not automatically added to the confluence-users group.  You can momentarily add them but after a short time they are removed from the group and no longer have access.

I'm using the SAML SSO Plugin, with the User Update Method set to "Update with UserSync-Connector"

 

**update** group membership is being removed by the UserSync

Has anyone else had the same issue?

Thank you.

Christian Reichert (resolution)

Hi Damien,

by default the Usersync connector will see AzureAD as the "master" and remove the User from all the groups where is not part of in AzureAD.

So one possible solution for you is to have a group like confluence-users (can be a different name) in AzureAD.

If that's not what you like, then you need to tell the connector which groups it should treat as "local groups". Essentially leave the User in the "local groups" even though they are not present in AzureAD.

You can do that via User Sync -> Edit the Azure AD connector you created.
Then -> Show Advanced Settings.

Scroll down to -> Local Group Management. Under -> Keep these Groups click -> Add one

Afterwards add confluence-users to there. This will mean the connector will never remove a User from this group. You can also use regular expressions instead - so something like confluence-.* would treat everything that starts with confluence- as a local group and leave it alone.

You also said:

They are not automatically added to the confluence-users group

If you would like to add every User the connector syncs to be added to the confluence-users group, then you can use the following setting.

Local Group Management. Under -> Always assign these groups click -> Add one and then add all the groups you want assigned to every User here.

Hope that helps!

You can also always schedule a Screenshare session with us, if you like to discuss this in more Detail. https://resolution.de/go/calendly

Cheers,
Chris

P.S. Full disclosure, I work for resolution, a marketplace vendor.