Azure AD Email as Username vs Login

[Dan Levine]

Hello

We are trying to have Azure synchronize the users email addresses as their username vs their Azure AD username. Is there a way to change the mapping of this?

Both our Jira and Confluence have been using emails as username and we want to leave it as is. 

It seems possible with Alias's but we do not want to do this for every user and every app, vs in the AD synchronizer.

Thank you so much for your help!

Dan

[Bruno Vincent]

Hi @Dan Levine

As of today, Crowd's username is mapped to Azure AD's userPrincipalName as per Atlassian's documentation (please read the field mapping section).

Thus Crowd aliases are definitely the best option here. This is easily scriptable thanks to Crowd's REST API for managing user aliases.

[Kristin Lyons]

Do you know if there is an equivalent to doing this with Jira/Confluence Cloud?

[Bruno Vincent]

Well, I haven't tested it myself but according to Microsoft's documentation, this should be possible:

• In SCIM (provisioning) settings, you need to map Atlassian's userName attribute to Azure AD's mail attribute (as detailed here)
• In SAML (SSO) settings, you need to map the nameidentifier attribute to Azure AD's mail attribute (as detailed here).

Again, I haven't tested it myself but you might want to give it a try 🙂

[Kristin Lyons]

Thanks, this is helpful!