Prevent users from Crowd to be users in JIRA or Confluence

Question

Hi

We use Crowd with a single user directory to control user access to JIRA and Confluence. The problem is that all users in the directory, even if the do not have access to the corresponding application, are visible in JIRA and Confluence and do count against the license limit.

How can we define access to Confluence or JIRA within Crowd for certain groups and not for others? Is the only way to do that having different directories?

Best regards

Andy

lpater · Answer

For context there is an open feature request for limiting the users visible to the application to only those that can authenticate here: https://jira.atlassian.com/browse/CWD-432.

Currently a workaround is to configure directories with the right users, and then attach them to the correct applications (which sounds pretty close to what you ended up with).

AnnWorley · Answer

I am happy to hear you found a workaround for your setup.

Judging by the comments on Improvement for Crowd to have selectable group sync it looks like the reason all groups from the directory are synchronized to the applications is:

...keeping memberships common across the applications is simpler and allows for groups like developers that have common cross-application behaviour.

Andy Eggenberger · Answer

Thank you for your quick answer. I set up a separate directory for all external people, so I can to some extent limit access and license count.

However, I do not understand why all groups in a directory are propagated to all connected applications. In my opinion propagation should be limited to those groups assigned to an application.