I need to control access to JIRA

[Greg Moore]

Access to our JIRA is controlled via LDAP.  When someone needs access they connect and JIRA assigns them to the default group of "JIRA Software User", works great.  But leaves me with one problem.  I have a number of Vendors and Supplies who are in the LDAP that I need to block until I explicitly allow them access a project.  How can I tell JIRA not to give this group of people a license automatically.  I can pull the list and stuff them in a special JIRA group, but so far have not been able to figure what field or value to use to prevent them from being set to "JIRA software user" on login.  Forcing manual intervention on all logins is not an acceptable solution.

[Amirul Ikhwan Omar]

You can add an additional setting in your LDAP configuration. 

1)If you have separate OU for JIRA user and vendor, you can add a Base DB, Additional User DN and Additional Group DN for JIRA to only sync with specific OU in the LDAP.

Example:

You have configured all JIRA user to be in OU named jira-users, the configuration will be look like this

• Base DN — dc=mycompany,dc=example,dc=com
• Additional Group DN — ou=jira-users

2) Another one is by defining an LDAP filter

You can create a filter based on how your LDAP is setup. You can refer our documentation on how to write LDAP search filters

• https://confluence.atlassian.com/dev/confluence-ldap-documentation-index/adding-ldap-integration-to-confluence-2-1-x/how-to-write-ldap-search-filters