Heads up! On March 5, starting at 4:30 PM Central Time, our community will be undergoing scheduled maintenance for a few hours. During this time, you will find the site temporarily inaccessible. Thanks for your patience. Read more.

×
Create
cancel
Showing results for 
Search instead for 
Did you mean: 
Sign up Log in

Migrate JIRA server users and groups to Azure AD

Manoj
I'm New Here
I'm New Here
Those new to the Atlassian Community have posted less than three times. Give them a warm welcome!
January 28, 2024

Hello,

We are trying to move the user and group management from jira server (crowd) to Azure AD. i.e. JIRA server would still be on-prem, but just the users and groups will be managed by Azure AD and will be sync'ed to JIRA. The articles I have found are talking about JIRA cloud to Azure cloud integrations. Can someone route me to any article(s) which could help me with this?

1 answer

0 votes
Luis Plaza
Rising Star
Rising Star
Rising Stars are recognized for providing high-quality answers to other users. Rising Stars receive a certificate of achievement and are on the path to becoming Community Leaders.
March 21, 2024

Hi @Manoj 

Jira internally has tables for directories and users. Each user is linked with a Directory ( Database schema https://developer.atlassian.com/server/jira/platform/database-schema/ ).

Depending on the status of your crowd directoy it can be simple or needs working with SQL and Jira CLI to migrate existing users from one directory to another inside the Jira database and you need a detailed cutover plan.

  • Create a Sandbox environment with a cloned database.
  • A Jira server account has an identifier that uniquely identifies it. The same happends for user accounts in Azure AD defined by the IDP Administrator ( email or other.
  • You may  export a list of users from the jira database and match if they exist in Azure AD.
    • Analyze the mapping of users using an external tool ( csv, excel, etc..)
    • Verify that the jira uses in the databse have the attribute needed in Azure AD to identify them
      • emails
      • emails not duplicated
      • etc..

 

In resume, it can be complicated... take a look at the features Jira CLI app has to help you perfom actions like get/set internally to the jira database to avoid sql operations:  https://appfire.atlassian.net/wiki/spaces/JCLI/pages/70785560/getUserList

 

Greetings

 

Suggest an answer

Log in or Sign up to answer