nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

Managing 'forgot your password' for confluence integrated with crowd

Bryan Karsh

Hi, I have confluence 3.3 integrated with crowd 2.04 - we have multiple external users accessIng the site. A common request I get is whether I can implement a "forgot your password" link. I understand from the documentation that since confluence is being externally managed, that it can't modify passwords - which is why the 'forgot your password' is disabled. But I wanted to know if there were any tricks I could employ. For example, maybe a hardcoded link to crowd's 'Forgot your password' page? I know I can turn off external management, but that would sever crowd completely right? I also have Jira managed by crowd, so I need confluence to be able to talk with Jira. Any tips appreciated !

Accepted answers

Septa Cahyadiputra

Hi Bryan,

As Confluence 3.3 does not have the necessary permission to write into Crowd, I do not think you will get much option other than changing the link to Crowd's "Forgot your Password" page.

If you change the link to point to Crowd's "Forgot your Password" page, then your user will be redirected to Crowd and shoudl be able to change their password there. However as Crowd synchronization done every hour (default) I'm not usre if the changes would be reflected instantly on Confluence or not.

Turning off "external management" won't turn off the integration completely, however it is not recommend.

Hope it helps.

Cheers,
Septa Cahyadiputra

All comments

Bryan Karsh

Thanks for the answer. Okay -- here is another question. When you say that turning off "external management" wont' turn off integration completely -- what does that mean? Can you explain what functionality is retained? For example, if a person updated their permission in confluence -- would it update in crowd?

Bryan Karsh

Thanks -- is it possible to add confluence as a trusted application to crowd -- or is the permission issue something that can't be worked around?

Septa Cahyadiputra

Hi Bryan,

As Confluence 3.3 does not have the necessary permission to write into Crowd, I do not think you will get much option other than changing the link to Crowd's "Forgot your Password" page.

Turning off "external management" won't turn off the integration completely, however it is not recommend.

Hope it helps.

Cheers,
Septa Cahyadiputra

Septa Cahyadiputra

Just to add here are some links that may be reveal when you unticked "external user management" option

Edit groups (Administrator)
Remove (Adminsitrator
Fullname could be modify (might leads to error when user try to modify this)
Email could be modify (might leads to error when user try to modify this)

Cheers,
Septa Cahyadiputra

Septa Cahyadiputra

I don't think it is something that can be workaround. You could try to upgrade to at least release version 3.5 where this permission could be configured.

Hope it helps.

Cheers,
Septa Cahyadiputra

Septa Cahyadiputra

Any changes won't reflect in Crowd as Confluence does not have the necessary permission to write into Crowd. Might leads to an ERROR when user want to try it trough Confluence.

Stephen Gilson

On a related note, when a user resets their password when Crowd is controlling access to Confluence, they get an email asking them to reset it. The email contains the URL of the Crowd reset password page. After resetting it, they hit "Update" on the form and are asked to login to Crowd. I want my users to be redirected to login to Confluence. How do I do that?

Septa Cahyadiputra

Hi Stephen,

You could try to use application.login.url on Crowd crowd.properties and see if its what you are after. Please review this documentation for the detail.

Cheers,
Septa Cahyadiputra

Stephen Gilson

We have multiple applications that all use Crowd for single sign on. Being able to set one URL won't work. What is needed is a way for Crowd to know which app the user is accessing, and redeirect them to the appropriate log in page.

Welcome!

It looks like you're new here. Sign in or register to get started.

Quick Links

Unanswered
Groups
Help

Find more posts tagged with

confluence

crowd