Move users from Active Directory to Google Apps

[Sachin Dole]

We have somewhat of a pickle. Our datacenter is shutting down and we need to move our JIRA and Confluence to the cloud pretty quickly. In datacenter, we use MS AD for user directory. In Cloud, we plan to use GSuite (Google Apps) user directory. The migration will be carried out by exporting the JIRA & Confluence DB from datacenter and importing into Cloud DB. 

Question is how, do we preserve user identities as we migrate? We do not want to lose Jira assignments, Confluence Page and Space ownership.

Is this possible? How to do it?

[Bruno Vincent]

Hi @Sachin Dole

What do you mean by 'move our Jira and Confluence to the cloud'? Will you host your own Jira and Confluence server instances in let's say Azure or are you migrating to Atlassian Cloud?

[Sachin Dole]

Thanks for that question @Bruno Vincent. Yes, we are migrating to self hosted Jira and Confluence in AWS.

[Bruno Vincent]

Ok, thanks. Since you're asking that question with the Crowd tag I assume you are also using Crowd.

You will thus need a third-party plugin to import your Google Apps identities in Crowd: https://marketplace.atlassian.com/apps/1211095/google-apps-for-crowd

Make sure that those identities have the same usernames as the ones you've got in Jira and Confluence, for instance firstname.lastname@yourdomain.com. Otherwise you will first need to rename your current identities (in Crowd as I suppose they're managed in Crowd right now, aren't they?).

Then add Google Apps directory to your applications in Crowd's administration console.

That should not be more difficult than that, however I strongly suggest that you first test this migration in a staging environment.

[Sachin Dole]

Thanks. We don't have Crowd currently. That "Crowd" tag was automatically added by this forum. Our current users are stored in AD on premises. In cloud we would like to use sign in with Google instead of AD.

[Bruno Vincent]

Well, in that case, any SAML authentication add-on will do: https://marketplace.atlassian.com/search?query=saml

Make sure to choose an add-on that supports SAML attributes mapping. This will enable you to have different usernames on each side (e.g. jdoe@yourdomain.com on Google Apps and jdoe in JIra and Confluence).

[Christian Reichert (resolution)]

Hi @Sachin Dole,

Bruno is right - a SAML Plugin will be the right Way to go and you find a few via his link. 

Here are some more specific links to our plugin (which you also find as the top match of Bruno's Query) and some Documentation links to your specific situation:

• SAML Single Sign On (SSO) App for Confluence, for Jira
• Step by Step Setup Guide for SAML SSO & Google G Suite
• Video Tutorial SAML SSO & Google G Suite

We also support the transformation of Usernames via a list of Regex's and also via eMail attribute if there is no system at all.

Let me know if you need some more specific advice and I'll happily answer here.

(Alternatively you can also contact us on https://resolution.de/go/support if you want to share information that can't be shared in a public forum).

Cheers,
Christian