You've been invited into the Kudos (beta program) private group. Chat with others in the program, or give feedback to Atlassian.
View groupJoin the community to find out what other Atlassian users are discussing, debating and creating.
We have JIRA connected to a LDAP for user Management.
To restrict accessing JIRA, we set up a filter in the configuration of the LDAP, that only users inside a certain Group in the LDAP are synchronized to JIRA.
We have set Default Application Access for each new User to JIRA-Software but still need to add each user manually to that Group in JIRA after we added the user to the Group in LDAP.
It seems that a new user synchronized from LDAP does not trigger the "New User" behaviour for Default application Access.
We want to reach a behavior, where each user we add to the Group in LDAP is added automically to the user group in JIRA - is there any way to achieve this?
Hi @Thilo Brause,
in the User Directory Configuration you can add a default group (if you have local groups enabled). Every user will be added to that group when the user logs in for the first time.
Yep
For internal directory with Ldap authentication
it means you want to use both Jira internal directory and LDAP directory then
best!
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
I'd like to clarify this to make sure I have this right.
The Jira server is configured with an LDAP user dir and JIRA Internal Directory. The LDAP is configured for Read Only, with Local Groups.
The LDAP config has:
"ldap.userdn": "CN=svc-jira-it,OU=Service Accounts,OU=PAN,DC=spockmate,DC=local”
"autoAddGroups": "jira-users|jira-software-users”
This means that all users added to the LDAP group "svc-jira-it" will be synced to Jira and appear in the list of users. However, they won't be granted access to Jira because there isn't a local "svc-jira-it" group on the Jira server that's granted access to Jira. The solution is to add a local group to Jira called "svc-jira-it" and add it to the autoAddGroups list in the LDAP config.
Have I got that right? It seems wrong to me.
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
Catch up with Atlassian Product Managers in our 2020 Demo Den round-up! From Advanced Roadmaps to Code in Jira to Next-Gen Workflows, check out the videos below to help up-level your work in the new ...
Connect with like-minded Atlassian users at free events near you!
Find an eventConnect with like-minded Atlassian users at free events near you!
Unfortunately there are no Community Events near you at the moment.
Host an eventYou're one step closer to meeting fellow Atlassian users at your local event. Learn more about Community Events
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.