Uploaded image for project: 'Crowd'
  1. Crowd
  2. CWD-3554

Add a "Copy User on First Login" flag in the Delegated Directory Configuration

    XMLWordPrintable

    Details

    • Feedback Policy:

      Our product teams collect and evaluate feedback from a number of different sources. To learn more about how we use customer feedback in the planning process, check out our new feature policy.

      Description

      Summary

      Currently, the delegated directory copies users on first login from the LDAP directory automatically. Some administrators do not want this behavior, as they wish to have more control (by creating the user manually).

      Some suggested feature implementation:

      1. Adding a "Copy user on first login" flag in the Settings tab to be able to control this behavior through the UI
      2. Utilize the already existing "Add Users" flag for this purpose.

      Workaround 1 - Use LDAP filter

      An alternative workaround would be to be more specific with your LDAP search filter. Include something like a group membership test or an AD attribute value as part of the User object filter on the Configuration tab. This allows you to control who is eligible for provisioning to crowd, for example:

      (&(objectClass=user)(sAMAccountName=*)(memberOf=Atlassian_users))

      Workaround 2 - Disable auto.create.user from the database

      1. Take a backup of the Crowd Database
      2. Run the following query to identify the directory id of the Delegated directory that you wish to have this feature disabled
        SELECT * FROM cwd_directory;
        
      3. Use the id in the following query (Replace <directoryID> with the id above):
        UPDATE cwd_directory_attribute SET attribute_value='false' WHERE attribute_name = 'crowd.delegated.directory.auto.create.user' AND directory_id = <directoryID>;
        
      4. Restart Crowd

        Attachments

          Issue Links

            Activity

              People

              Assignee:
              Unassigned Unassigned
              Reporter:
              fsim Foo Sim (Inactive)
              Votes:
              18 Vote for this issue
              Watchers:
              21 Start watching this issue

                Dates

                Created:
                Updated: