Jira cloud with microsoft AD integration

[SUNIL SABALE]

We have a JIRA cloud instance. As of now we were using JIRA on premises which is using AD users.  We want to move from server to the cloud one. The problem is we want to have our Active Directory users in JIRA cloud. I came across a documentation related to early access program of identity manager. Does the identity manager supports  the Microsoft Active Directory integration?

Regards,

Sunil

[Dave Meyer]

Hi @SUNIL SABALE,

Yes, you can sync users and groups from an on-premises Active Directory to Jira Software Cloud using a cloud identity provider and Atlassian Access. All the cloud identity providers that we support, including Okta, Microsoft Azure AD, Onelogin, and Google Cloud Identity provide connectors to sync your AD users and groups to their cloud systems, which can then provision and deprovision users and sync groups to Atlassian.

Check out our Atlassian Guide to Cloud Identity and Access Governance for a high level overview, and the specific articles on user provisioning and Active Directory. Finally, here is the MS Azure AD article about user provisioning integration with Atlassian. Most customers set up both SSO (the article you linked in the answer above) and also user provisioning (which we released in March 2019).

Cheers,

Dave

[Sujoy Majumdar]

@Dave Meyer I am trying to follow the steps in the document below :

However CouldNot locate the -->User Provisioning--->Create Directory. See screenshot from my setup below.

Any ideas ?

https://docs.microsoft.com/en-us/azure/active-directory/saas-apps/atlassian-cloud-provisioning-tutorial

[Dave Meyer]

Hi @Sujoy Majumdar ,

That screen is from the administration area for your site; however user provisioning is configured for an organization (so it can work across multiple sites). Based on your screenshot, it looks like you are not an admin for the parent organization of your site. If you have an idea who might be an admin, I would check with them to see if they see something different when they go to admin.atlassian.com

Otherwise you can contact Atlassian support and they can help you identify the admin of your organization.

[dalvarez]

does Jira Cloud have a way of creating AD user accounts when on-boarding is submitted?

[Pandey Pradip]

hi @Dave Meyer how inactive or removed user from AD can be manage in Jira cloud 

if we are going with Azure AD and Atlassian Access in Jira cloud for user managemnet then  How will we be able to revoke inactive users and how can we secure the environments so that inactive users or users that no longer work with out  company is not having access to our environment.

[Dave Meyer]

@Pandey Pradip you can sync creation of new users, changes to their profile attributes, and changes to their status (like deactivation) by setting up user provisioning between Azure AD and Atlassian Cloud. Check out the documentation from Microsoft here: https://docs.microsoft.com/en-us/azure/active-directory/saas-apps/atlassian-cloud-provisioning-tutorial

[Sloan]

HI @SUNIL SABALE

Currently not possible. :(

LDAP integration is one of the Restricted functions in Atlassian Cloud apps. I know of no way to archive a AD integration in Jira Cloud.

Also see Restricted functions in Jira Cloud applications.
For now the only available integration is G Suite. In the Future there are supposed to be more like Microsoft Azure AD.

Regards
Niklas

[SUNIL SABALE]

Thanks Niklas.

I suspect that i went through various documents saying its nolt supported.

Can we try a workaround with Azure?

I mean can we integrate JIRA cloud with Azure directory. It shouldn't be a problem as Azure is also cloud hosted. Or is there any third party tool that acts as a intermediater

Your input please.

Regards,

Sunil

[Sloan]

Azure Active Directory integration seems to be in the making. To learn about a eventual release have a look at this Issue in Atlassians Jira: https://jira.atlassian.com/browse/ID-79

At the moment this feature does not exist.

[SUNIL SABALE]

Wont this work?

https://docs.microsoft.com/en-us/azure/active-directory/active-directory-saas-atlassian-cloud-tutorial

[Sloan]

This will actually work, if you are happy with using the Identity Manager for only SSO / SAML. :)

• SAML single sign-on

But keep in mind that your users will need an Atlassian Account anyway.
This is not the same as managing the Users completely via AD like on Jira Server.

[SUNIL SABALE]

I want same authentication as that of Server instance. I mean same users as that in Jira Server which is integrated to AD. Is there any way to achieve that on cloud?