nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

Azure AD table mappings not syncing in Crowd

KO89

Hello, I currently have the latest version of Crowd being synced with Azure Active Directory. The issue I'm having is all the properties (user name, display name, etc) sync to Crowd once the change is made in Azure AD except the email_address. This is important because I'm creating a Jira email Notification system which would be pulling the addresses from Crowd (My AD syncs to Crowd and Crowd syncs to Jira) Crowd and Jira are read-only so the change would need to happen within Azure AD I believe. Any help would be appreciated.

Accepted answers

Bruno Vincent

Hi @KO89

Do you mean you get a null value for email addresses? Crowd maps the email attribute to the mail attribute in Azure AD. An Azure AD user has a non null mail attribute if he has an Office 365 mailbox (Exchange plan) or if his account was synchronised from an on-premise AD with Azure AD Connect (please read the following accepted answer on SO).

Lars Olav Velle

Hi @KO89

We (Kantega Single Sign-on) recently added Cloud Connectors to our Single Sign-on add-ons.

This lets you sync Azure users and groups directly into JIRA, Confluence etc without the need for Crowd!

If a user does not have the mail attribute, then we simply map the user name attribute => email.

-Lars

All comments

Bruno Vincent

Hi @KO89

Lars Olav Velle

Hi @KO89

We (Kantega Single Sign-on) recently added Cloud Connectors to our Single Sign-on add-ons.

This lets you sync Azure users and groups directly into JIRA, Confluence etc without the need for Crowd!

If a user does not have the mail attribute, then we simply map the user name attribute => email.

-Lars

KO89

Thank you for the response @Bruno Vincent. To answer your question, when I check the Crowd database I indeed have null values for email addresses. Within the Azure console there is no "mail" attribute but only an email address attribute under the user profile column which isn't mapping. We don't have an Office 365 subscription but are using our work emails instead.

KO89

Thank you @Lars Olav Velle. I will definitely give this product a look. Being that we've already provisioned a VM for Crowd and connected it to the rest of the Atlassian Stack in a production environment I doubt we will steer away from it though.

Bruno Vincent

Hi @KO89

That's unfortunately what I was assuming. The email address you see under the user profile in Azure console is named otherMails in Azure AD. It is different from the mail attribute that is used by Crowd. You'll get the mail attribute if you purchase an O365 subscription (and assign Exchange licenses to your users).

KO89

Thank you @Bruno Vincent, this saves me a lot of time and troubleshooting. I assumed their must be a way I could change the mapping configurations but not having access to the back-end of AAD would most likely prevent that. I will move forward with the O365 subscription option.

Welcome!

It looks like you're new here. Sign in or register to get started.

Quick Links

Find more posts tagged with

crowd

active-directory