How do I go from AD authentication to Jira Authentication

Helpdesk Helpdesk May 19, 2015

We are currently using AD for authentication, for security reasons I would like to move to internal authentication and not end up with a hybrid that still leaves the security risks.

So what I want to do is turn off AD authentication, not loose the user accounts, turn on authentication within Jira.

3 answers

0 votes
Helpdesk Helpdesk May 19, 2015

Tim,

We setup JIRA with AD from the start

We have trainers that need access to JIRA while in the field and don't have a VPN setup yet.  We don't want to be vulnerable to a hack using AD over the web.

0 votes
Tim Eddelbüttel
Rising Star
Rising Star
Rising Stars are recognized for providing high-quality answers to other users. Rising Stars receive a certificate of achievement and are on the path to becoming Community Leaders.
May 19, 2015

If you really want to do this, make sure that you have in booth user directories the same usernames!

Did you switched before from internal to AD or started you with AD? Your groups are managed in JIRA or AD?

  1. Export your existing users from cwd_user in a CSV file (username, first name, last name,  mail)
  2. Export your existing memberships (https://confluence.atlassian.com/x/qwc_EQ)
  3. Check that you have a working admin user in your internal directory

If your not familar how to export these data, take a look at the Crowd Docs (https://confluence.atlassian.com/x/UIdcGg) and change the MySQL query to your needs. It's nearly the same.

Download the JIRA CLI (https://bobswift.atlassian.net/wiki/display/ACLI/Downloads) and play with your exported data on a testing environment.

Just out of interest, could you explain what you mean with security reason on your AD?

0 votes
Rodrigo Rosa
Atlassian Team
Atlassian Team members are employees working across the company in a wide variety of roles.
May 19, 2015

Hello!

You may use this https://confluence.atlassian.com/display/JIRA/Migrating+Users+between+User+Directories document as reference to migrate all users to JIRA internal.

Regards,

Rodrigo Rosa

Suggest an answer

Log in or Sign up to answer