Unable to login to internal directory user

I'm running Confluence with Crowd in an SSO configuration, and I cannot login to a user that I created in the Confluence internal directory.

The internal directory is listed first in the directory order, and I've confirmed that the user was created in the internal directory. When I try to login, the UI says the username/password is invalid, but the logs say:

WARN [atlassian.seraph.auth.DefaultAuthenticator] login login : 'internaluser' tried to login but they do not have USE permission or weren't found. Deleting remember me cookie.

I have verified that this user is a member of both the confluence-user (doesn't this enable USE?) and confluence-admin groups.

I'm running Confluence 4.2 and Crowd 2.4.

How do I fix this?

2 answers

1 accepted

8 votes
Colin Goudie Community Champion Jun 28, 2012

You can't. When SSO is enabled you MUST log in via a Crowd user.

This changed back I think when they added embedded crowd to Confluence

But then it's not possible to edit any properties of the Crowd directory since it's in-use by your active login account.

I want to keep a local admin directory in the internal directory which I can then use to edit the Crowd directory settings.

Is the solution to switch out the SSO authenticator with the default one whenever I need to use the internal directory?

Colin Goudie Community Champion Jun 28, 2012

Yeah pretty much, you disable the SSO authenticator in seraph-config.xml and reboot, do the fixes, and revert, reboot. Very annoying.

I was trying to find the small clause in the documentation that says this but can't find it now. If I find it I'll post it here

it's been taking long time to fix this problem for me. I disabled SSO and finally I can login with a internal account !!

2 votes
Colin Goudie Community Champion Jun 28, 2012

Here it is, on this page


It is possible to define multiple user directories in Confluence. However, if you enable SSO integration, you will only be able to authenticate as users from the Crowd server defined in the crowd.properties file.

Colin Goudie Community Champion Jun 28, 2012

Yeah, I wouldn't call it a feature

Thanks Collin. Not the answer I hoped for, but at least I can quit searching.

would this also affect my ability to add users to a newly created group in confluence? cuz i cant add users to groups now.

Suggest an answer

Log in or Sign up to answer
How to earn badges on the Atlassian Community

How to earn badges on the Atlassian Community

Badges are a great way to show off community activity, whether you’re a newbie or a Champion.

Learn more
Community showcase
Asked May 24, 2018 in Confluence

What are the resources that you use to learn more about Atlassian Products?

I am gathering information about resources available for Atlassian product knowledge transferring for a presentation in our local Atlassian User Group. I want to group them in four categories From ...

613 views 18 16
View question

Atlassian User Groups

Connect with like-minded Atlassian users at free events near you!

Find a group

Connect with like-minded Atlassian users at free events near you!

Find my local user group

Unfortunately there are no AUG chapters near you at the moment.

Start an AUG

You're one step closer to meeting fellow Atlassian users at your local meet up. Learn more about AUGs

Groups near you