-
Suggestion
-
Resolution: Unresolved
-
None
-
None
-
6
-
As an idP Administrator, I would like to be able to select the attributes including user details and group memberships to be updated upon JIT provisioning.
At present, Jira's JIT provisioning functionality requires an absolute group attribute and it cannot be blank. Putting a dummy attribute will trigger an error.
Existing group memberships defined in Jira will be replaced by the group attribute defined in the idP.
In most use-case for JIT, there is an option to allow group attributes to be synced or not and users will be added to a default group like jira-users. Currently, third-party apps offer JIT provisioning with such capability.
- is cloned from
-
CONFSERVER-60578 Make JIT Group Attribute Sync optional and add Default Group Membership
- Gathering Interest
- relates to
-
JRASERVER-72388 Local group membership is removed when JIT is enabled.
- Closed
-
JRASERVER-71896 Update only new users with JIT
- Gathering Interest
-
SAMLDC-73 Jira Application Access respect "default group" when using JIT provisioning
- Reviewing