Our Jira and LDAP Active Directory (Microsoft) are integrated.
As a company policy, we never delete users from our AD, but disable them.
However, in Jira I see all users (both enabled and disabled).
How do I configure my Jira to ignore disabled users?
You could perhaps filter by the LDAP attribute userAccountControl...
Based on Microsoft Support's explanation:
The attribute that holds this information is the userAccountControl attribute. This attribute is composed of a combination of different flags. The flag for setting the object that you want to disable is UF_ACCOUNTDISABLE, which has a value of 0x02 (2 decimal). The bitwise comparison filter that specifies userAccountControl with the UF_ACCOUNTDISABLED bit set would resemble this:
...would be all accounts that are not disabled.
So, in JIRA Admin | Users | User Directories
Select your AD configuration then expand the User Schema Settings heading
In the User Object Filter field, paste something like...
This is the default filter for AD with the additional filter added.
Or the selected field here:
Where does the syntax (!(UserAccountControl:1.2.840.1135188.8.131.523:=2)) come from? What is the meaning of those numbers? Active Directory has a normal looking syntax with named flags, shouldn't we be able to use something like (!(UserAccountControl & UF_ACCOUNTDISABLE = UF_ACCOUNTDISABLE)) or, lacking symbolic bitmasks, (!(UserAccountControl & 0x02 = 0x02))?
I already tried this and ended up having bigger problems: this filter removes people from the LDAP results and due to this Jira will remove all their group memberhips. That's by (bad) design, and even if the account is re-enabled, the users group membership is not going to be restored.
If jira would just diable the users it would be OK, but that's not what it really does.
Note: this is also happening if they forgot to change their password every 3 months! Try to scale the problem to >100 users and you are already a doomed jira admin.
Connect with like-minded Atlassian users at free events near you!Find a group
Connect with like-minded Atlassian users at free events near you!
Unfortunately there are no AUG chapters near you at the moment.Start an AUG
We're bringing product updates and pro tips on teamwork to ten cities around the world.Save your spot