Multiple LDAP sources for users and groups in Confluence

[Robert Cooper]

Is it possible to set up confluence to get only users from one Active Directory forest and only groups from a differest forest? The user forest does not have any groups. The group forest does not have active user accounts; it has accounts tied to Exchange mailboxes but disabled and those mailboxes authenticate from a domain trust to the user forest. (don't blame me, I did not set this mess up and have no control over it.)

[rrudnicki]

Hi Robert, 

No worries, I won’t blame you, I’ve already worked as Network/Infrastructure engineer, so I know sometimes we face some legacy structure that we need to deal :).

Well, as we know, this is a very peculiar environment, so I believe since your users and groups are being able to communicate on Active Directory environment even not being at the same forest, I believe this will also work with confluence as well. When you setup Confluence to authenticate against AD, then the AD is the responsible to manage the authentication and permissions. However, I strong recommend you to try this first in a staging environment. 

The only thing you need to pay attention, is the users that will be authenticated on Confluence be tied with confluence-users group which based in your scenario will be in a different forest. 

Good luck.

Renato Rudnicki