Do Answers and My.Atlassian.com use Crowd?

Do answers.atlassian.com and my.atlassian.com use Crowd for user management/authentication? If so, why do I have to log in seperately?

3 answers

1 accepted

A bit of background on the Crowd setup at Atlassian...

My.atlassian.com authenticates against a Crowd instance, and this is used for SSO across a couple of other sites such as our plugins and translations tools.

However Crowd is backed by an LDAP server (specifically OpenLDAP), and there is the option to bypass Crowd and talk to this server directly. For a number of sites this is preferable; internally we're increasingly moving to a distributed architecture and LDAP's ability to transparently replicate gives us greater scalability and removes a single point-of-failure, as we can give each application its own read-only LDAP slave that syncs from a master server.

Answers.atlassian.com is one of the sites that talks to LDAP directly, hence your login is shared with MAC but you need to login to each site separately. We do have an ongoing internal project to unify the logins across more systems (e.g. support), but there are a number of logistical issues to doing so due to the large number of existing users.

Re: releasing the connector; the code is somewhat Atlassian specific, as it needs to treat staff and customers differently, and overrides the registration process to use my.atlassian.com for signup. However I should really do a developer-blog post about the module as it may be useful to others.

[Edited]

Answers uses my.atlassian.com's Crowd for authentication, however it does not use Crowd itself nor support Single-Sign-On (SSO), which means that you have to log in at least once for each location. (Cookies can handle the rest.)

Perhaps we will provide SSO for our various sites, but that would also require consolidating all users to a single system (which is a fairly great undertaking) as well as adding a Crowd version of Python (for Answers).

Are you planning to publish this crowd authenticator for Answers ?

Likely no, as it's really only an LDAP authenticator running against our Crowd instance.

I just set up an OSQA instance and I used https://bitbucket.org/sannies/django-crowd-backend/wiki/Home to connect to crowd. Seems to work well.

Any more specifics on how you set this up with OSQA?

Suggest an answer

Log in or Join to answer
Community showcase
Teodora [Botron]
Published Thursday in Marketplace Apps

Jira Inferno: The Nine Circles of Jira Administration Hell

If you spend enough time as a Jira admin - whether you are managing a single, mid-sized instance, a large enterprise one or juggling multiple instances at once - you will eventually find yourself in ...

280 views 0 12
Read article

Atlassian User Groups

Connect with like-minded Atlassian users at free events near you!

Find a group

Connect with like-minded Atlassian users at free events near you!

Find my local user group

Unfortunately there are no AUG chapters near you at the moment.

Start an AUG

You're one step closer to meeting fellow Atlassian users at your local meet up. Learn more about AUGs

Groups near you
Atlassian Team Tour

Join us on the Team Tour

We're bringing product updates and pro tips on teamwork to ten cities around the world.

Save your spot