How to include subgroups from Active Directory?

I'm trying to integrate Jira with AD. All users in AD are located in the "Users" group and the subgroup "Domain Users" (i.e. a group within the "Users" group). Not all users are present in the top-level "Users" group.

My Base DN looks like this:


However, this syncs only users which are directly in the "Users" group, and nothing from it's subgroups. Is there a way to include the "Domain Users" in the sync? (Enabling 'nested groups' did do anything).

BTW, This is the DN of the "Domain Users" group:

cn=Domain Users,cn=Users,dc=example,dc=com

Any help is greatly appreciated.

1 answer

1 accepted

Accepted Answer
1 vote

Hi Dario, the Domain Users group is an special group in AD, it's called primery group. By default all users in AD are members of this group, but its membership association is different than the other groups, this group doesn't have the attribute MemberOf.

Currently JIRA doesn't support primery groups, but there's already an improvement request to implement this ability:

As a workaround, you may associate the user your want to see in JIRA with another LDAP group or set up the User Directory so that it uses the Default Group Membership functionality.

I hope it helps

Suggest an answer

Log in or Sign up to answer
Community showcase
Posted Sep 25, 2018 in Jira

Atlassian Research Workshop opportunity on Sep. 28th in Austin, TX

We're looking for participants for a workshop at Atlassian! We need Jira admins who have interesting custom workflows, issue views, or boards. Think you have a story to sha...

454 views 7 5
Join discussion

Atlassian User Groups

Connect with like-minded Atlassian users at free events near you!

Find a group

Connect with like-minded Atlassian users at free events near you!

Find my local user group

Unfortunately there are no AUG chapters near you at the moment.

Start an AUG

You're one step closer to meeting fellow Atlassian users at your local meet up. Learn more about AUGs

Groups near you