• Community
  • Products
  • Jira Core
  • Questions
  • okta/JIRA/AD new users unable to login. is it the Jira Users group and autoAddGroups attribute causing the issues for new users unable to login?

okta/JIRA/AD new users unable to login. is it the Jira Users group and autoAddGroups attribute causing the issues for new users unable to login?

Thanks.  I meant to see if others had issues with Okta and jira on-prem and the attribute autoAddGroups when syncing all of it through AD. 

First off, existing users are working fine.  New users will be created when the User directory syncs with AD.  BUT, not added to the JIRA USERS group.  So their first experience of attempting to login to jira is for the browsers sending them to OKTA to authenticate then sent to JIRA where they are rejected because they don’t belong to JIRA USERS.

 

Before OKTA we had it configured in our global permissions as such:

JIRA Users

Ability to log in to JIRA. They are a 'user'. Any new users created will automatically join these groups, unless those groups have JIRA System Administrators or JIRA Administrators permissions.

Note: All users need this permission to log in to JIRA, even if they have other permissions.

 

Where the group used is the same as the autoAddGroup attribute. 

 

 from the docs:

In Confluence 3.5.2 and later, and JIRA 4.3.3 and later: The first time a user logs in, their group memberships will be checked. If the user does not belong to the specified group(s), their username will be added to the group(s). If a group does not yet exist, it will be added locally. On subsequent logins, the username will not be added automatically to any groups. This change in behavior allows users to be removed from automatically-added groups. In Confluence 3.5 and 3.5.1, they would be re-added upon next login. 


 

 

1 answer

0 vote

Yes

Suggest an answer

Log in or Join to answer
Community showcase
Teodora [Botron]
Published Feb 15, 2018 in Marketplace Apps

Jira Inferno: The Nine Circles of Jira Administration Hell

If you spend enough time as a Jira admin - whether you are managing a single, mid-sized instance, a large enterprise one or juggling multiple instances at once - you will eventually find yourself in ...

1,183 views 6 19
Read article

Atlassian User Groups

Connect with like-minded Atlassian users at free events near you!

Find a group

Connect with like-minded Atlassian users at free events near you!

Find my local user group

Unfortunately there are no AUG chapters near you at the moment.

Start an AUG

You're one step closer to meeting fellow Atlassian users at your local meet up. Learn more about AUGs

Groups near you
Atlassian Team Tour

Join us on the Team Tour

We're bringing product updates and pro tips on teamwork to ten cities around the world.

Save your spot