Create
cancel
Showing results for 
Search instead for 
Did you mean: 
Sign up Log in

Next challenges

Recent achievements

  • Global
  • Personal

Recognition

  • Give kudos
  • Received
  • Given

Leaderboard

  • Global

Trophy case

Kudos (beta program)

Kudos logo

You've been invited into the Kudos (beta program) private group. Chat with others in the program, or give feedback to Atlassian.

View group

It's not the same without you

Join the community to find out what other Atlassian users are discussing, debating and creating.

Atlassian Community Hero Image Collage

Automatic Application Access for User out of LDAP

We have JIRA connected to a LDAP for user Management.

To restrict accessing JIRA, we set up a filter in the configuration of the LDAP, that only users inside a certain Group in the LDAP are synchronized to JIRA.

We have set Default Application Access for each new User to JIRA-Software but still need to add each user manually to that Group in JIRA after we added the user to the Group in LDAP.

It seems that a new user synchronized from LDAP does not trigger the "New User" behaviour for Default application Access.

We want to reach a behavior, where each user we add to the Group in LDAP is added automically to the user group in JIRA - is there any way to achieve this?

2 answers

1 accepted

0 votes
Answer accepted

Hi @Thilo Brause,

 

in the User Directory Configuration you can add a default group (if you have local groups enabled). Every user will be added to that group when the user logs in for the first time.

0 votes

@Thilo Brause

Yep

For internal directory with Ldap  authentication

it means  you want to  use both Jira internal  directory and LDAP directory then

  1. Just be sure that you  have the group  say  Active-jira-user  is in Ldap, and this group  is also configured  in JIRA as the group  user must be in to  access Jira.  then you will  manually  add groups which are in  Jira internal  directory. (i guess your  current case) just create groups in  LDAP then add user to  this group,  if group are  not in  Jira(unified) they  will  be created after synchro depending on minutes you set for synchronization chose the Update group memberships when logging in  > every time user logs in,   chose synchronization . this should work. 
  2. Make sure your group  setting  is  correctly filtered in  LDAP configuration setting
  3. Make sure order of directory is correct in  JIRA application
  • You could configure LDAP  directory to  add a default group with Read Only, with Local Groups  enabled (Every user will be added to that group when the user logs in for the first time) but you  will  have problem later when  you  want to  add other group after first  login because  this  is done  once.

best!

I'd like to clarify this to make sure I have this right.

The Jira server is configured with an LDAP user dir and JIRA Internal Directory. The LDAP is configured for Read Only, with Local Groups.
The LDAP config has:

"ldap.userdn": "CN=svc-jira-it,OU=Service Accounts,OU=PAN,DC=spockmate,DC=local”
"autoAddGroups": "jira-users|jira-software-users”

This means that all users added to the LDAP group "svc-jira-it" will be synced to Jira and appear in the list of users. However, they won't be granted access to Jira because there isn't a local "svc-jira-it" group on the Jira server that's granted access to Jira. The solution is to add a local group to Jira called "svc-jira-it" and add it to the autoAddGroups list in the LDAP config.

Have I got that right? It seems wrong to me.

Suggest an answer

Log in or Sign up to answer
TAGS
Community showcase
Posted in Jira Software

Presenting the "Best of 2020" Jira Software roundup!

Catch up with Atlassian Product Managers in our 2020 Demo Den round-up! From Advanced Roadmaps to Code in Jira to Next-Gen Workflows, check out the videos below to help up-level your work in the new ...

4,463 views 5 15
Join discussion

Community Events

Connect with like-minded Atlassian users at free events near you!

Find an event

Connect with like-minded Atlassian users at free events near you!

Unfortunately there are no Community Events near you at the moment.

Host an event

You're one step closer to meeting fellow Atlassian users at your local event. Learn more about Community Events

Events near you