Uploaded image for project: 'Jira Data Center'
  1. Jira Data Center
  2. JRASERVER-25988

Push user synchronisation via Remote API

XMLWordPrintable

    • We collect Jira feedback from various sources, and we evaluate what we've collected when planning our product roadmap. To understand how this piece of feedback will be reviewed, see our Implementation of New Features Policy.

      NOTE: This suggestion is for JIRA Server. Using JIRA Cloud? See the corresponding suggestion.

      1) A soap service that has operations to work with user directories (including starting a sync).
      2) Command line tools/api to run directory synchronizations.

      This question actually applies to both JIRA and Confluence. I have an LDAP user directory in both application that is linked to our Windows Domain Controller with Active Directory. Almost all of our user management is supported by Active Directory, but it is a clunky process to have to update Active Directory, and then go request a Synchronization in JIRA/Confluence.

      Is there a way to push a directory sync request from our Active Directory server to our JIRA/Confluence instances that are hosted on another server? Ideally, changes could be automatically pushed from active directory to JIRA/Confluence, but I realize that is a huge effort. So, a good alternative would be to have a command-line (or something of the sort) that I could run on our Active Directory server after I am done making changes, that would push an immediate sync request over to JIRA and Confluence. I looked through the XML RPC services for JIRA, but didn't find anything that I could use to request a directory synchronization.

            [JRASERVER-25988] Push user synchronisation via Remote API

            Dave Meyer added a comment -

            JIRA's SOAP API was deprecated in JIRA 6.0 and will be removed in JIRA 7.0.

            Dave Meyer added a comment - JIRA's SOAP API was deprecated in JIRA 6.0 and will be removed in JIRA 7.0.

            Ravi Nair added a comment -

            I echo karl's sentiments. We are also doing a lot of automation around group creation via webhooks to a mediator application. However these groups are unusable until the sync is complete and having to manually intervene goes against the 'automate-the-heck-out-of-everything' policy.

            Ravi Nair added a comment - I echo karl's sentiments. We are also doing a lot of automation around group creation via webhooks to a mediator application. However these groups are unusable until the sync is complete and having to manually intervene goes against the 'automate-the-heck-out-of-everything' policy.

            karl added a comment - - edited

            I'm in a Linux shop and use scripts for creating new employee user accounts, part of this includes adding them to jira groups via the Jira CLI. I too would like a method to remotely tell the Jira server to sync with LDAP, so that said users can be added to the groups as soon as they're created. Clicking through the Jira Web UI and clicking 'synchronize' or waiting for the sync period aren't ideal for this particular scenario.

            EDIT: Is this something that could be added to a future version of Jira CLI?

            karl added a comment - - edited I'm in a Linux shop and use scripts for creating new employee user accounts, part of this includes adding them to jira groups via the Jira CLI. I too would like a method to remotely tell the Jira server to sync with LDAP, so that said users can be added to the groups as soon as they're created. Clicking through the Jira Web UI and clicking 'synchronize' or waiting for the sync period aren't ideal for this particular scenario. EDIT: Is this something that could be added to a future version of Jira CLI?

            Sean McIlvenna added a comment -

            The last time I attempted to develop a plugin for JIrA I found that
            setting up the development environment in eclipse was rather clunky...
            that was a year ago though... has it gotten any better? I would love
            to write a plugin for this, but I'm not too excited to spend hours
            trying to setup the environment...

            On Oct 17, 2011, at 7:04 PM, "Mark Lassau [Atlassian] (JIRA)"

            Sean McIlvenna added a comment - The last time I attempted to develop a plugin for JIrA I found that setting up the development environment in eclipse was rather clunky... that was a year ago though... has it gotten any better? I would love to write a plugin for this, but I'm not too excited to spend hours trying to setup the environment... On Oct 17, 2011, at 7:04 PM, "Mark Lassau [Atlassian] (JIRA)"

            Mark Lassau (Inactive) added a comment -

            There is currently no remote API to cover this, however it is possible to write custom REST or XML/RPC endpoints as a plugin.

            If you were willing to do this, then the local API has methods available to do a user synchronisation:

            • Use CrowdDirectoryService.findAllDirectories() to get all configured User Directoies
            • Call CrowdDirectoryService.synchroniseDirectory(directoryId) to start the synch on a given directory.

            Mark Lassau (Inactive) added a comment - There is currently no remote API to cover this, however it is possible to write custom REST or XML/RPC endpoints as a plugin. If you were willing to do this, then the local API has methods available to do a user synchronisation: Use CrowdDirectoryService.findAllDirectories() to get all configured User Directoies Call CrowdDirectoryService.synchroniseDirectory(directoryId) to start the synch on a given directory.

            Mark Lassau (Inactive) added a comment -

            Ideally, changes could be automatically pushed from active directory to JIRA/Confluence...

            Does Active Directory support sending remote events or have a plugin framework that could handle this at its end?

            Mark Lassau (Inactive) added a comment - Ideally, changes could be automatically pushed from active directory to JIRA/Confluence... Does Active Directory support sending remote events or have a plugin framework that could handle this at its end?

            Mark Lassau (Inactive) added a comment -

            Active Directory is a special case because it supports "incremental synchronisation".
            That is, AD is able to tell JIRA/Confluence just the delta of changes since the last synchronisation.
            So the first suggestion would be that you could increase the synchronisation frequency (eg to 10 minutes) and this should not cause too much strain on JIRA or your network.

            The only caveat is that incremental synchronisation does not work with clustered AD installations.

            Mark Lassau (Inactive) added a comment - Active Directory is a special case because it supports "incremental synchronisation". That is, AD is able to tell JIRA/Confluence just the delta of changes since the last synchronisation. So the first suggestion would be that you could increase the synchronisation frequency (eg to 10 minutes) and this should not cause too much strain on JIRA or your network. The only caveat is that incremental synchronisation does not work with clustered AD installations.

              Unassigned Unassigned
              b8b133e682e8 Sean McIlvenna
              Votes:
              11 Vote for this issue
              Watchers:
              13 Start watching this issue

                Created:
                Updated:
                Resolved: