JIRA and Microsoft Active Directory

[Arnold Chang]

I'm using Microsoft Active Directory for user and group management in my organization.

As a result, we will use it for authentication to JIRA.

One of my doubts is whether JIRA User will become deavtivated automatically in sync with the AD account which has been deactivated 2 hrs ago. Normally AD and JIRA will be sync up every 60 minutes in my environment.

Thanks,

Arnold

[Alex Perez · Accepted solution]

Hi Arnold,

As Bhushan stated before, disabling a user in AD doesn't disable it in Jira. But it prevents that the user can login in jira.

Additionally you must remove the user from the jira-users group for both release his licence and revoke his login-permission.

HTH

[Bhushan Nagaraj]

Hi Arnold,

Disabling a user in active directory does not disable the user in JIRA.

There is an improvement request here

https://jira.atlassian.com/browse/JRA-24937

And there are lots of questions about it on Answers as well. Read

https://answers.atlassian.com/questions/83692/how-to-auto-deactivate-jira-users-when-using-ldap-integration

https://answers.atlassian.com/questions/139606/what-happens-with-the-users-that-are-removed-from-ldap-when-you-use-crowd-ldap-connector

Cheers

Bhushan