How to map active directory groups to internal Confluence groups

MikeA

Confluence version 6.3

Active Directory Setup - Microsoft Active Directory (Read Only, with Local Groups)

Hi,  I'm taking over as a Confluence Admin for a employee that left the company and have some questions on user provisioning.  Currently when users want access to Confluence they submit a request and our Access Provisioning group will add them to two Confluence groups that map to Active Directory groups.

 

Confluence_Space_Admins

 Or

 Confluence_Users

Once they're assigned to these groups they can login with their active directory credentials.  I'm guessing these internal Confluence groups map to the Active Directory groups.  

 

 We’d like to add another group for the  Data Analytics team that maps to “Data_Analytics” Active Directory group.  However I'm not sure how to map an internal confluence group to a group in active directory?

 

Thanks

 

Jonathan Smith

@MikeA,

  Couple things to check into:

Go into Confluence Administration and see how your User Directories are set up. Is your Active Directory on top of Internal Directory? If so, good. 

Example: My internal directory is pretty empty, we just have a service account in case SSO goes down.

If your Active Directory group is on top, then you should have your help desk or whomever manages AD groups - create the new Data_Analytics AD group. Have them add the desired users into this group. After replication, the group should make its way into Confluence, and you should be able to lock down a space with that new AD group.

During Confluence setup for a new user, the people are added to Confluence_Users more than likely for application access. You can verify this by going into Confluence Administration and clicking Global Permissions.

Hope this information helps. Check out an add-on called SAML SSO if you don't want to worry about users typing in passwords! Wasn't the easiest setup, but works very well for us and support was great.