Hello Community
I work for a customer that have an Atlassian Suite (Jira Server, Confluence, Bitbucket, Bamboo). The suite
has been used for almost 5 years.
Since platform install Jira has been used as a User Directory for all Atlassian Suite. And right now
we are in the process of connecting Jira to corporate Active Directory in order to comply with corporation
policies. This migration should enable people to login with their active directory corporate accounts into
the platform, and should preserve permissions and ownership of their current and previous work.
In order to accomplish that we have been testing the following approach.
1.- Connect AD to Jira. (Read Only with Local Groups)
2.- Sync AD with Jira.
3.- Disable AD User Directory in Jira
4.- Rename Jira Internal Directory users to match username in LDAP.
5.- Enable AD Directory
6.- Switch Directories order having AD first and Jira Internal second.
7.- Re configure previous user group membership. Users are able to login with AD account, however they lost their groups. So through api we repopulate user group memberships.
This procedure seems to work ok with every Atlassian App(They recognize user rename and keep ownership of historical content), except for Confluence.
Confluence does not recognize a renamed user and handles it as a new user. And historic content that was formerly assigned to a unrenamed user, now show as created by "unknown user (<previous username>)".
Would like to validate the approach that we are using, and also would like to know how to keep ownership of historic content in Confluence Platform.
Best Regards
Rodrigo Valdés
Hi @Rodrigo Valdés ,
There are quite a few tables where UPDATE sql statement must happen, that said please review How to merge two users' content ownership and permissions in Confluence for further information.
Kind regards,
Rafael
Online forums and learning are now in one easy-to-use experience.
By continuing, you accept the updated Community Terms of Use and acknowledge the Privacy Policy. Your public name, photo, and achievements may be publicly visible and available in search engines.
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.