Need solution for users to change their own passwords, jira auth via external AWS Directory Service

[corey_l_benderoth_ctr]

Trying to find solutions for users to change their own passwords when the jira and bitbucket authentication is done through an external AWS Directory Service directory.

[Nic Brough -Adaptavist-]

If authentication is done externally, then you need to be looking at a solution that works on the external service, not on Jira.

[corey_l_benderoth_ctr]

Looking for 3rd party options and add-ons possibilities that works with AWS Directory Service. Don’t want to have to give users access to the directory directly.

This link shows if you change your ldap setting to read/write then you can utilize the internal jira password change option but the details are not clear on what this looks like and what the users would need access to which may be a non starter for my program.

https://confluence.atlassian.com/doc/connecting-to-an-ldap-directory-229838241.html

[Nic Brough -Adaptavist-]

If you go for read-write on the Jira side, then they'll be able to do it from their profile.  What it looks like is an "old password, new password, repeat new password" set of questions on a screen.

[corey_l_benderoth_ctr]

Atlassian said that would work for Jira however it is not recommended bc it is a high security risk. The bitbucket developer said this will not work on the Bitbucket side.