Crowd user groups

[Korneel Wever]

We're in the process of a merger of departments and re-evaluating our current login setup.

One thing I cannot find in the documentation is where Confluence stores it's user groups.

Ideally I'd have an ActiveDirectory, where credentials are checked against and the groups for Jira/Confluence stored in Jira/Confluence (or Crowd) but not in the AD (as i've been told it does that currenly). Is this possible?

Currently when I try to add a person with AD credentials to a group in Jira, I get an error stating it's read-only.

[Peter Van de Voorde · Accepted solution]

Hi Korneel,

This is certainly possible.

I'm currently managing about 70 groups in crowd with users that are authenticated through LDAP.

All groups are created and managed in crowd and none in LDAP.

Best regards,

Peter

[Peter Van de Voorde]

You'll need to add LDAP as a User Directory to Crowd using the Directory Connector. You can select the option to administer the groups locally.

[Korneel Wever]

I found it too. In the Directory Connector it just needs the 'copy' checkbox. That should allow it, as then they are local authorisation with AD authentication.

Thanks!

[BernardoA]

According to my understanding it's not possible to add an LDAP user to a crowd group.

[Korneel Wever]

So if I understand correctly, it's not possible to have a mix between LDAP/CROWD users and 'normal' users in groups in Jira?

[Tiago Comasseto]

Hi Korneel,

Regarding the message read-only it happens when you try to make an user member of a LDAP group through JIRA web interface. In this situation you should edit the group membership directly in your LDAP interface.

Also, it's not possible to make a LDAP user member of a local group of Crowd.

Cheers