Create
cancel
Showing results for 
Search instead for 
Did you mean: 
Sign up Log in
Celebration

Earn badges and make progress

You're on your way to the next level! Join the Kudos program to earn points and save your progress.

Deleted user Avatar
Deleted user

Level 1: Seed

25 / 150 points

Next: Root

Avatar

1 badge earned

Collect

Participate in fun challenges

Challenges come and go, but your rewards stay with you. Do more to earn more!

Challenges
Coins

Gift kudos to your peers

What goes around comes around! Share the love by gifting kudos to your peers.

Recognition
Ribbon

Rise up in the ranks

Keep earning points to reach the top of the leaderboard. It resets every quarter so you always have a chance!

Leaderboard

Come for the products,
stay for the community

The Atlassian Community can help you and your team get more value out of Atlassian products and practices.

Atlassian Community about banner
4,467,284
Community Members
 
Community Events
177
Community Groups

change AD username and keep Atlassian account

Jira Cloud using AD for logins

We need to change the AD username and email, but the existing account is linked to Jira and Confluence.

How can we do this without losing everything the user already has in Jira etc?

 

1 answer

1 accepted

1 vote
Answer accepted
Dario B Atlassian Team Jul 22, 2021

Hello @Wallet ,

If you want to change username and email for a managed user then you may want to use the User provisioning REST API. Specifically, depending on your needs, one of the below endpoint should fit your needs:

  • Update user via user attributes

    PUT /scim/directory/{directoryId}/Users/{userId}

    Updates a user's information in a directory by userId via user attributes. User information is replaced attribute-by-attribute, with the exception of immutable and read-only attributes. Existing values of unspecified attributes are cleaned.

  • Update user by ID (PATCH)

    PATCH /scim/directory/{directoryId}/Users/{userId}

    This operation updates a user's information in a directory by userId via PATCH. Refer to GET /ServiceProviderConfig for details on the supported operations.

 

 

For further details on this, and to know the other Cloud admin REST APIs, you may also want to review the below links:

 

 

I hope this helps.

 

Cheers,
Dario

thanks Dario.

I just want to confirm, this will allow us to change user@email.com to user.lastname@email.com without losing any of their existing data? Across all Atlassian products? Our cloud logins are managed via Microsoft AD, so we are hoping to make users firstname.lastname@email.com and have that change reflected to their Atlassian accounts.

 

/B

You are very welcome @Wallet ,

Assuming that you use Atlassian Access in order integrate with Microsoft AD for Single Sign On then I can confirm that, as long as the the user identifier does not change, you can update all the other users details.

Also, the User provisioning REST APIs are actually to be used when your Identity provider is not supported, otherwise it would just be enough to update the data in your AD and they will be automatically updated among all the Atlassian Cloud applications you use.

From the Understand user provisioning documentation page:

User provisioning integrates an external user directory with your Atlassian organization. This integration allows you to automatically update the users and groups in your Atlassian organization when you make updates in your identity provider [...]

Supported identity providers

Your user provisioning setup depends on the identity provider you use. Supported identity providers include:

In the future, we may support more identity providers based on customer demand.

If you use another identity provider, you can use the user provisioning API to create your own integration that allows you to manage users and groups.

 

However, there are also chances that you have already connected your AD to a supported IDP (as described in Configure user provisioning for Active Directory or LDAP) and therefore there is no need to use the APIs:

To provision users from Active Directory, first connect your Active Directory or LDAP to a supported identity provider. If you use another identity provider, use the user provisioning API to create your own integration that allows you to manage users and groups.

 

Please review the below pages and let me know if you have further questions on this:

 

For further details you may also want to watch: https://www.youtube.com/watch?v=7EQhYz-vApw

 

Cheers,
Dario

Suggest an answer

Log in or Sign up to answer
DEPLOYMENT TYPE
CLOUD
PRODUCT PLAN
STANDARD
TAGS

Atlassian Community Events