Migrate specific JIRA accounts to LDAP/AD

Question

We operate a JIRA+Confluence environment, wherein JIRA is attached to our Active Directory, and Confluence is attached to JIRA as a Crowd authentication source.

Recently we acquired a larger JIRA/Confluence license and were able to expand the AD base root to include our sister company, of which about two dozen employees had local accounts in the JIRA (and by it, the Confluence). Now I want/need to merge their old accounts with the accounts brought by the AD. However, I cannot rename the internal accounts in JIRA to their AD names, no matter the priority of the user directories - I always get an error "this username already exists".

How do I merge the accounts, both in JIRA and Confluence, without data loss?

Moses Thomas_08kyb0 · Answer

@Marco SchuschnigYou don't change name in  Jira internal directory,   you can  have only  one  unique  user_name  in  both  directory  because, Jira internal  directory  will be mapped to  AD directory  during  synchro. so  make sure the same name exit  in  AD as  in  Jira internal  directory.

Marco Schuschnig · Answer

@Moses Thomas the problem is the users already exist in the AD. But I cannot rename the internal-directory users to the AD name format because JIRA errors out. And I cannot disable the AD connector as then my colleagues cannot work. I need something that works with as low downtime as possible.

Moses Thomas_08kyb0 · Answer

@Marco SchuschnigIf you  want  to  merge Jira internal  directory  to  AD  users,   then  users in internal  directory  must be  present in AD, ie  you  will  need to  create users in  AD and base on your  configuration  during  syncro   AD  users will  be able to  log in to  Jira  with  AD credentials.

Note username in AD  must  be the same in JIRA internal  directory  and AD directory  should be first  in directory order, then you  can  manage groups from  Jira  internal  directory.

You  can configure  internal  directory  with  LDAP/AD authentication.

Best!