Managing 'forgot your password' for confluence integrated with crowd

[Bryan Karsh]

Hi, I have confluence 3.3 integrated with crowd 2.04 - we have multiple external users accessIng the site. A common request I get is whether I can implement a "forgot your password" link. I understand from the documentation that since confluence is being externally managed, that it can't modify passwords - which is why the 'forgot your password' is disabled. But I wanted to know if there were any tricks I could employ. For example, maybe a hardcoded link to crowd's 'Forgot your password' page? I know I can turn off external management, but that would sever crowd completely right? I also have Jira managed by crowd, so I need confluence to be able to talk with Jira. Any tips appreciated !

[Septa Cahyadiputra · Accepted solution]

Hi Bryan,

As Confluence 3.3 does not have the necessary permission to write into Crowd, I do not think you will get much option other than changing the link to Crowd's "Forgot your Password" page.

If you change the link to point to Crowd's "Forgot your Password" page, then your user will be redirected to Crowd and shoudl be able to change their password there. However as Crowd synchronization done every hour (default) I'm not usre if the changes would be reflected instantly on Confluence or not.

Turning off "external management" won't turn off the integration completely, however it is not recommend.

Hope it helps.

Cheers,
Septa Cahyadiputra

[Septa Cahyadiputra]

Just to add here are some links that may be reveal when you unticked "external user management" option

• Edit groups (Administrator)
• Remove (Adminsitrator
• Fullname could be modify (might leads to error when user try to modify this)
• Email could be modify (might leads to error when user try to modify this)

Cheers,
Septa Cahyadiputra

[Stephen Gilson]

On a related note, when a user resets their password when Crowd is controlling access to Confluence, they get an email asking them to reset it. The email contains the URL of the Crowd reset password page. After resetting it, they hit "Update" on the form and are asked to login to Crowd. I want my users to be redirected to login to Confluence. How do I do that?

[Septa Cahyadiputra]

Hi Stephen,

You could try to use application.login.url on Crowd crowd.properties and see if its what you are after. Please review this documentation for the detail.

Cheers,
Septa Cahyadiputra

[Stephen Gilson]

We have multiple applications that all use Crowd for single sign on. Being able to set one URL won't work. What is needed is a way for Crowd to know which app the user is accessing, and redeirect them to the appropriate log in page.

[Bryan Karsh]

Thanks for the answer. Okay -- here is another question. When you say that turning off "external management" wont' turn off integration completely -- what does that mean? Can you explain what functionality is retained? For example, if a person updated their permission in confluence -- would it update in crowd?

[Bryan Karsh]

Thanks -- is it possible to add confluence as a trusted application to crowd -- or is the permission issue something that can't be worked around?

[Septa Cahyadiputra]

I don't think it is something that can be workaround. You could try to upgrade to at least release version 3.5 where this permission could be configured.

Hope it helps.

Cheers,
Septa Cahyadiputra

[Septa Cahyadiputra]

Any changes won't reflect in Crowd as Confluence does not have the necessary permission to write into Crowd. Might leads to an ERROR when user want to try it trough Confluence.