nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

Lost system Admin rights when using JIra with Crowd SSO

Marcelo Caldas

The system is working perfectly for everything except Jira System Administrator's priviledges.

I have Jira (5.2) configured with SSO with Crowd (2.5.3) and the free plugin for IWA available on your site.

I have set up crowd directory to sync with my company's AD to provide IWA authentication for users (a requirement since we are PIV enabled here and very soon we'll loose access to our passwords)

the only problem I am having is that my user no longer has access to Jira System Administration issues even though I created a jira-system-administrator group on AD and assigned myself to it. I can validate that CROWD did the sync and shows both the group and myself as a member of that group.

My question is why I don't have access to system administrator functionality?

Accepted answers

Harry Chan5

Hi, besides what Eddie said you'll need to confirm in JIRA what the groups have permissions on. There is a global permission setting in JIRA that defines what each group can do and perhaps this is set incorrectly.

All comments

EddieW_h8oivr

I think jira-administrator and not jira-system-administrator is the role you want.

https://confluence.atlassian.com/display/CROWD/Integrating+Crowd+with+Atlassian+JIRA#IntegratingCrowdwithAtlassianJIRA-1.3SpecifywhichuserscanlogintoJIRA

Harry Chan5

Marcelo Caldas

thanks Eddie and Harry.. you're both right. While using Jira stand alone, the groups on the local jira "directory" was being used, even though the users were coming from AD. But when we plugged in Crowd, I could no longer add users to groups other than AD and I created the groups with slight different names on AD, causing all the trouble.

Welcome!

It looks like you're new here. Sign in or register to get started.

Quick Links

Find more posts tagged with

crowd

sso

security