How to unlock locked accounts in AD with Jira Service Desk

[Vinzent Decker]

It happens regularly that a user locks his Windows-account by mistake, then creates a ticket and I have to unlock that user manually. Is there a way to automate this process? So when the ticket is created Jira contacts the active directory and says: "hey someone is locked please unlock him". I searched for quite a while now but it seems no one else has asked this question or even has a solution. I would be grateful for your help.

[Andrew Laden · Accepted solution]

With Add-ons, anything is possible.

Look at AD Attribute Sync. 

https://marketplace.atlassian.com/apps/1212162/active-directory-attributes-sync?hosting=server&tab=overview

They have an Unlock AD Account post function.

https://deviniti.com/support/addon/server/active-directory/latest/using-data-in-workflow-post-function-update-data/

[Nic Brough -Adaptavist-]

Thanks Andrew, I was pretty sure I'd seen one that does it, but couldn't immediately remember!

[Nic Brough -Adaptavist- · Accepted solution]

Jira does not have the ability to unlock users that been locked in an active-directory, as it doesn't really have an analogous state for a user (disabled is an internal thing for the local Jira system, and "too many failed logins" just leads to a captcha.  It's relying on AD to know more about locks and whether someone can log in)

So, to do this, your Jra "hey, please unlock X" call would have to be coded for you.  Either a script that can connect to AD and issue the "please unlock" call, or maybe an app that adds the function to Jira (check the marketplace for advanced user handling apps, or ones that do clever things with AD - I've used some that get AD properties for example)

[Vinzent Decker]

Thank you very much for your answers!