When using Crowd SSO, all other user directories are ignored and there is nothing in the UI that indicates this to the user. There is a note in the setup documentation but this can be missed. For example, this means once SSO is established the user will be confused as to why they can no longer login with a user from their internal directory (say the confluence internal administrator) as normally adding any other kind of user directory would not disable all others like the Crowd SSO entry does.

Possible ways to get around this when Crowd SSO is enabled

• Disable all other user directories
• Warn user when editing user directories
• Warn upon initial setup