nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

Access from two active directory domains

Mosh

Hello

We have a Jira Server and all users are logged in from one given domain (aka domain1.com) through Active Directory.

Now we have to give access from another domain (aka domain2.com) . Both domains are trusted.

Should it work with Jira Server? Do we need some add-on or 3rd-party app to support it?

Thanks in advance

Accepted answers

Steve Thornhill_57zt4f

You can define multiple access points into Jira out of the box to match what you are attempting.

Just be aware of the ordering of the directory list if a user exists in both domains, the first in the list will be used to check credentials.

All comments

Steve Thornhill_57zt4f

You can define multiple access points into Jira out of the box to match what you are attempting.

Just be aware of the ordering of the directory list if a user exists in both domains, the first in the list will be used to check credentials.

Ismael Jimoh

What Steve described above is correct and so long as you are on JIRA server, you should be able to connect new directories without an add-on as described here.

Also note the point he made about directory positions.

If you have multiple directories however there are a few things I would recommend adding to what was suggested:

Make sure users have the same username attribute across directories (if not, you will have the same user with multiple accounts),
The group association is per directory so changing the order of your directory could revoke specific group membership for a user if he or she is not a part of the group in question.
Watch out for your license. New directories bring in new users, make sure you constrain your connection filter as much as possible to avoid leading to a scenario where the application is not usable due to your change.

I will recommend testing out the directory connection on a test server before doing it on your production.

Rgds

Oleksandr Tynetalo_u23qft

Hi @Steve Thornhill, @Ismael Jimoh as i understand @Mosh has asked about possibility to synchronise and provide access to Jira for users in different Active Directory which is "trusted" to the AD already connected to Jira

So the question is: will user from domain2 have access to JIra, if Jira is only connected to domain1, and domain1 has trust relation with domain2

This situation is possible when Jira has access only to one AD, but not to second AD, which makes impossible to connect second domain and use multiple directories in Jira

Artur Moura

Hi team,

Currently, there is no option for Jira/Crowd to sync users from another trusted domain via one specific domain controller.

Here in this https://jira.atlassian.com/browse/CWD-2978 suggestion, we can confirm this.

Welcome!

It looks like you're new here. Sign in or register to get started.

Quick Links

Find more posts tagged with

server

jira-software

jira-server

jira-software-server

active-directory

ldap