How do I modify User Directory config with SSO turned on?

I need to change the configuration of the User Directory for Crowd in Jira. Specifically, I want to enable nested groups.

According to the documentation (https://confluence.atlassian.com/display/JIRA/Configuring+User+Directories) I need to set up an admin user in the Jira internal directory and use that to modify the crowd settings.

But according to this (https://jira.atlassian.com/browse/CWD-2535), you can't use accounts in the internal directory if you have SSO enabled.

This seems like a fairly major oversight, since the only way I can see to make this tiny change is to disable SSO (requiring config file changes), restart Jira, make the director config change, then reenable SSO and restart Jira again.

1 answer

1 accepted

0 votes

Hi Rob,

As you stated, the only way to do this changes through the JIRA UI would be to disable the SSO, use an Internal admin and update the User Directory.

As an alternative for this, we could do this change directly to the database.

You can do this by updating the attribute "ldap.nestedgroups.disabled" to 'false' at the table _cwd_directory_attribute_.

If you have more than one User directory, make sure you update the attribute associated to the correct directory_id.

You'll need to shutdown your application before doing this change.

Please make sure you have a backup of your database before doing any changes to it.

Hope this helps,

Marcus

Suggest an answer

Log in or Join to answer
Community showcase
Sarah Schuster
Posted Jan 29, 2018 in Jira

What are common themes you've seen across successful & failed Jira Software implementations?

Hey everyone! My name is Sarah Schuster, and I'm a Customer Success Manager in Atlassian specializing in Jira Software Cloud. Over the next few weeks I will be posting discussion topics (8 total) to ...

2,878 views 12 18
Join discussion

Atlassian User Groups

Connect with like-minded Atlassian users at free events near you!

Find a group

Connect with like-minded Atlassian users at free events near you!

Find my local user group

Unfortunately there are no AUG chapters near you at the moment.

Start an AUG

You're one step closer to meeting fellow Atlassian users at your local meet up. Learn more about AUGs

Groups near you
Atlassian Team Tour

Join us on the Team Tour

We're bringing product updates and pro tips on teamwork to ten cities around the world.

Save your spot