How to migrate from Active Directory for Atlassian user managment

Hi folks,

I currently have five Atlassian applications on my network - JIRA, Confluence, Bamboo, Stash and FishEye/Crucible. Right now, all of them authenticate against JIRA for the users and groups, and JIRA authenticates against Active Directory (on Windows Server 2012). We have about 20 (current) users and 20 groups.

I would like to get rid of Active Directory from our network as the only thing it is doing is handling authentications for JIRA. (The two domain controllers are the only Windows servers on our network.) So, I'd like to move to Crowd instead. My question is twofold:

  1. How can I migrate the users from AD to Crowd? If I have to recreate them from hand one by one, that's not a big deal - I will just take the time and do that. I'd like to migrate the passwords but again, if that can't be done, it's not a big deal.
  2. How can I then convert JIRA (and the other applications) to using Crowd without losing any of the user information? In other words, I don't want two "Doug" users just because I used to be "Doug" in "AD" and now I'm "Doug" in Crowd.

A supplementary question is, can Crowd handle user password management? In other words, can users go there to reset and change their password?



2 answers

Hi Doug - you are on the right track of using Crowd as the Auth hub .. With the apps registered to it for user, group and authentication management. More than "migrate", I think of it as more "reconfiguring" AD to Crowd. Semantics. Once done, disabling the old configs to JIRA. You will also get SSO between the apps. smile

Its hard to give a fail proof answer without specifically seeing exactly what you have running / configd so far but what you want to do is pretty normal and the whole point of Crowd, so I refer you to the Crowd doc.

Btw - indeed there is a pw reset portal for users in Crowd but not typically used. Instead set up the SMTP configs on Crowd and users can reset pw thru email via the app login page. If configd right, once you reset the pw in one app, it will proliferate to the rest. 

Can likely do this all in a few hours when know how to do it; maybe a little longer if just learning. Sounds like a good weekend project for you smile if need help ... 



Thanks for the input!

Suggest an answer

Log in or Sign up to answer
Community showcase
Published 9 hours ago in Opsgenie

Getting the Most out of Atlassian and Opsgenie Together

We’re excited to invite you to this action-packed webinar where we will demonstrate how to integrate Opsgenie’s powerful alerting and on-call management tools with your entire Atlassian stack. Mar...

16 views 0 0
Read article

Atlassian User Groups

Connect with like-minded Atlassian users at free events near you!

Find a group

Connect with like-minded Atlassian users at free events near you!

Find my local user group

Unfortunately there are no AUG chapters near you at the moment.

Start an AUG

You're one step closer to meeting fellow Atlassian users at your local meet up. Learn more about AUGs

Groups near you