youngmon/atlassian-qna huggingface dataset:
Missing possibility to add multiple users at once
Asked by Teemu Niemi:

Our test site is updated to Crowd 3.4.4 and one of the key features is ability to add multiple users at once to an group. Sadly our site doesn't show any sign of promised. Are we missing something? Do we need tick a box or remove a tick from a box?

We want this one as promised in release notes, but this is missing.

![image2019-3-6_11-49-42.png](/t5/image/serverpage/image-id/54327i55EB6B420606483A/image-size/large?v=v2&px=999 "image2019-3-6_11-49-42.png")


Answers:
author: Gaurav
body: Hi [@Teemu Niemi](/t5/user/viewprofilepage/user-id/3150480) \& [@Craig Castle-Mead](/t5/user/viewprofilepage/user-id/224850)

Thanks for reporting this.

There appears to be a missing clarification in the release notes of Crowd 3.4.4, the new screen is currently only available for the directories which have nested groups disabled.

The release notes have been updated now.

We are also working on revamping the UX/UI for the directories which have nested group enabled, and we hope to provide the new experience for these directories soon.


author: Craig Castle-Mead
body: Thanks for clarifying [@Gaurav](/t5/user/viewprofilepage/user-id/1177576)

CCM


author: Craig Castle-Mead
body: Hi Teemu,

I'm not seeing this in our 3.4.4 environment either - wondering whether the release notes aren't correct.

Hopefully Marcin or one of the Crowd team are able to chime in with clarification.

CCM
Incorrect IP address used behind reverse proxy
Asked by Daniel Hilgarth:

I am using a dockerized version of Crowd which is sitting behind a Traefik reverse proxy.

Everything works fine except for one thing: I have a third party application that uses Crowd for identity management and I have added it as an application and added the external IP address of the third party application in the Remote Addresses tab.

However, Crowd blocks the authentication requests with this message:

\> INFO \[crowd.manager.validation.ClientValidationManagerImpl\] Client with address '172.25.0.4' is forbidden from making requests to application 'x x x'

172.25.0.4 is the IP address of the reverse proxy in the internal Docker network.

What changes do I have to make so that Crowd is able to know the original IP address? Is there a header that Traefik should set or something similar?


Answers:
author: Daniel Eads
body: Hi Daniel,

Sounds like it's missing the X-Forwarded-For header. In nginx, we'd set it like this:

    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;

Traefik is new territory for me however! I see mention about [Forwarded headers needing to have a trusted IP](https://docs.traefik.io/configuration/entrypoints/#forwarded-header) but am not completely sure that's what needs to happen in this situation. That's the path I'm headed down learning more about - just wanted to mention this in advance in case you might already have some knowledge in that area. If not, I will hopefully have some more info for you soon.

Cheers,  
Daniel

comments: author: Daniel Hilgarth
body: Hi Daniel,

thanks for the suggestions. tcpdump showed that the headers were present and correct. What was missing was to actually add traefik as a trusted proxy to Crowd :)

Cheers,

Daniel


Tags: traefik
Need suggestion in Enabling SAML in Crowd
Asked by PRabhakar:

We have installed CROWD setup in AWS, Installation part is done , need some suggestion in enabling SAML within crowd


Answers:
author: Gaurav
body: Hi [@PRabhakar](/t5/user/viewprofilepage/user-id/2806241) ,

Please follow the documentation here

<https://confluence.atlassian.com/crowd/crowd-sso-2-0-967322291.html>
Crowd vs JIRA User Database
Asked by Jonathan Valliere:

I have a number of Atlassian products to help manage my work. We're a small group of around 5 users and all of the licenses are limited to 10 users. The inconsistencies of all the logins is causing a problem and I would like to unify everything but I'm not sure if Crowd is required.

Since my licenses are all limited to 10 users, using JIRA as the User Database might be a problem since not all 5 of the regular users have access to everything else. If I remember correctly using the JIRA User Database causes all users to occupy a license seat in all connected products.

I would like to login once and automatically login everywhere.

Does it make sense to use Crowd? If so, what does the User migration look like? I would have to deduplicate and replace all the Admins and somehow migrate all the current Users to Users in Crowd.


Answers:
author: Mikael Sandberg
body: Hi Jonathan,

Using Jira as your user directory for all your other tools does not mean that if a user only needs access to Bitbucket that they also have to have access to Jira. It is all controlled by the groups that a user belongs to and that have application access. I am using Jira as our user directory for about 500 users (looking into migrating to Crowd), and not all of the users that have access to Confluence for example have access to Jira.

comments: author: Jonathan Valliere
body: Does this also provide some kind of SSO or do you need Crowd for that?


author: Mikael Sandberg
body: In order to get SSO you would need an app or [Crowd](https://confluence.atlassian.com/crowd/overview-of-sso-179445277.html). If you want to go the app route there are lots of options available on [Marketplace](https://marketplace.atlassian.com/search?query=sso).
Can Crowd act as a IdP proxy?
Asked by Simon So:

I would like to use Crowd to manage permissions to my Atlassian apps (JIRA for example), but I have a set of internal users in AD and some external users in Salesforce. AD is no problem, but can Crowd act as a IdP proxy and redirect authentication to Salesforce IdP?

Thanks,

Simon


Answers:
author: Lokesh Naktode_miniOrange
body: Hi [@Simon So](/t5/user/viewprofilepage/user-id/33742) ,

You can use [Crowd SAML SSO Plugin](https://marketplace.atlassian.com/apps/1218304/saml-single-sign-on-for-crowd?hosting=server&tab=overview) to enable authentication from Salesforce for your external users. To connect to your JIRA and other atlassian applications with Salesforce through Crowd, you will also need to install the crowd SSO connector add-ons in these Atlassian applications. Using the SSO connector, any user accessing that application can either log in with AD (internal user) or choose to get redirected to Salesforce for SSO (external user).

1. [Crowd SSO Connector add-on for JIRA](https://marketplace.atlassian.com/apps/1220053/sso-connector-for-crowd-and-jira?hosting=server&tab=overview)
2. [Crowd SSO Connector add-on for Confluence](https://marketplace.atlassian.com/apps/1220055/sso-connector-for-crowd-and-confluence?hosting=server&tab=overview)
3. [Crowd SSO Connector add-on for Bitbucket](https://marketplace.atlassian.com/apps/1220057/sso-connector-for-crowd-and-bitbucket?hosting=server&tab=overview)
4. [Crowd SSO Connector add-on for bamboo](https://marketplace.atlassian.com/apps/1220056/sso-connector-for-crowd-and-bamboo?hosting=server&tab=overview)

In this case, all the SSO requests and response to and from Salesforce will go through the Crowd server. The user authentication will be done by the Salesforce and AD and Crowd can be still be used to manage user permissions.

Please reach out to atlassiansupport@miniorange.com for further queries or if you need any help with the setup.

Thanks,  
Lokesh

Full Discloser: I work for the miniOrange.
Can user access for Jira Cloud be managed by Crowd Data Center?
Asked by Arjun Kanniah:

Hi,

We have Cloud versions of Jira and Confluence, on-prem version of Crowd Data Center. Can user management be done for cloud versions of Atlassian products with data center version of Crowd on-prem?

If this is possible, can someone from the community point me to the documentation?

Thanks,

Arjun


Answers:
author: Bruno Vincent
body: Hi [@Arjun Kanniah](/t5/user/viewprofilepage/user-id/3114014)

As of today, Crowd does not ship with a built-in directory connector to Atlassian Cloud so you can't manage your Atlassian Cloud users and groups from Crowd, at least directly.

However, Crowd does provide connectors for LDAP directories such as Active Directory. If you sync your Active Directory users and groups to a supported Identity Provider such as

* Azure AD (via Azure AD Connect)
* Okta (via Okta AD agent)
* Onelogin (via Onelogin AD Connector)

You can then sync those latter identities to Atlassian Cloud thanks to [Atlassian Cloud SCIM API](https://confluence.atlassian.com/cloud/user-provisioning-959305316.html).

In the end, you would thus have

Crowd -\> AD -\> Azure AD / Okta / Onelogin -\> Atlassian Cloud

And you would actually manage your Atlassian Cloud users and groups through Crowd.


Tags: cloud

confluence-cloud

jira-cloud

user-management
Managed to enter 2 IPs into the directory configuration and now get a stack trace when click on conn
Asked by Harjot Saberwal:

Hi There,

I was looking at ways to get crowd to connect to 2 ldap servers and i tried to put both ips of my ldap servers into the connector part of directory. It accepted the 2 ips and continues to work, but when i click on connecter in the specific directory, i get a stack trace with the following error:

java.lang.RuntimeException: java.net.URISyntaxException: Illegal character in authority at index 7: ldap://10.224.0.5 10.224.0.15:389

as you can see, it's the 2 ips that i entered with a space. how can i reset that configuration so that it only uses the first ip? Not sure which xml file contains the configuration so that i can fix the issue?


Answers:
author: Nic Brough -Adaptavist-
body: It's in the database, but you should be able to change it by editing the connector.

You'll need to put in a valid address for a single ldap server, without a protocol named.

comments: author: Harjot Saberwal
body: Thanks Nic,

Where can i change it? if on the webpage i click on the connector, it immediately gives me a stack trace:-

java.lang.RuntimeException: java.net.URISyntaxException: Illegal character in authority at index 7: ldap://10.224.0.5 10.224.0.15:389

So i cannot edit the connector as i cannot get to it. Or am i missing something?

thanks


author: Harjot Saberwal
body: NP worked it out, The hint that this configuration is in the database was useful!

Found a table in the database that had the info i needed. cwd_directory_attribute

found the line that was bad and updated it using the following:

**update** cwd_directory_attribute

**Set** attribute_value **=** 'ldap://10.224.0.5:389'

**where** directory_id**=** 557057 **and** attribute_name **=** 'ldap.url'

the directory_id is unique to the specific directory, and each directory has a 'ldap.url', so set this back and it worked.

thanks
Server restart and all logins are failing
Asked by Kirsty Dixon:

Hi,

Had to reset our server and all servers are running as should, but when go login all logins are failing and if try to reset password, get the following error

"The password could not be changed by the credentials provider. The following URL does not specify a valid Crowd User Management REST service"


Answers:
author: Bruno Vincent
body: Hi [@Kirsty Dixon](/t5/user/viewprofilepage/user-id/257294)

The error you get means that your applications (e.g. Jira, Confluence) cannot contact the Crowd server. Maybe Crowd did not start properly. Anything in Crowd's log file?
How do I export list of users users to excel from crowd
Asked by Abhinav Arae:

How do I export list of users users to excel from crowd?


Answers:
author: Bruno Vincent
body: Please apply the following instructions: <https://confluence.atlassian.com/crowdkb/how-do-i-generate-a-csv-export-of-users-and-memberships-from-a-specific-directory-in-crowd-442271568.html>


Tags: confluence

jira
Crowd Install fails early, on running the UI Wizard, at Continue with Database Configuration
Asked by GWOS:

Log last few lines

2019-04-22 03:21:42,424 FelixDispatchQueue INFO \[osgi.container.felix.FelixOsgiContainerManager\] Stopped bundle com.atlassian.plugins.less-transformer-plugin (32)  
2019-04-22 03:21:42,424 FelixDispatchQueue INFO \[osgi.container.felix.FelixOsgiContainerManager\] Stopped bundle com.atlassian.pdkinstall.plugin (25)  
2019-04-22 03:21:42,424 FelixDispatchQueue INFO \[osgi.container.felix.FelixOsgiContainerManager\] Stopped bundle com.atlassian.analytics.analytics-whitelist (17)  
2019-04-22 03:21:42,424 FelixDispatchQueue INFO \[osgi.container.felix.FelixOsgiContainerManager\] Stopped bundle com.atlassian.crowd.frontend-plugin (22)  
2019-04-22 03:21:42,734 http-nio-8095-exec-12 INFO \[atlassian.plugin.manager.DefaultPluginManager\] Plugin system earlyStartup ended  
2019-04-22 03:21:42,735 http-nio-8095-exec-12 INFO \[atlassian.plugin.manager.DefaultPluginManager\] Plugin system lateStartup begun  
2019-04-22 03:21:42,737 http-nio-8095-exec-12 INFO \[atlassian.plugin.manager.DefaultPluginManager\] Plugin system lateStartup ended  
2019-04-22 03:21:42,742 http-nio-8095-exec-12 INFO \[atlassian.crowd.scheduling.CrowdSchedulerLifecycle\] Starting scheduler com.atlassian.crowd.scheduling.InternalLocalScheduler@3c7c29be  
2019-04-22 03:21:42,745 http-nio-8095-exec-12 INFO \[atlassian.crowd.scheduling.CrowdSchedulerLifecycle\] Starting scheduler com.atlassian.crowd.scheduling.CrowdSchedulerService@4f95446e  
2019-04-22 03:21:42,784 http-nio-8095-exec-12 ERROR \[atlassian.crowd.plugin.RequiredPluginsStartupCheck\] Required plugin is disabled: crowd-rest-plugin  
2019-04-22 03:21:42,784 http-nio-8095-exec-12 ERROR \[atlassian.crowd.plugin.RequiredPluginsStartupCheck\] Required plugin is disabled: com.atlassian.plugins.atlassian-plugins-webresource-plugin  
2019-04-22 03:21:42,784 http-nio-8095-exec-12 ERROR \[atlassian.crowd.plugin.RequiredPluginsStartupCheck\] Required plugin is disabled: com.atlassian.auiplugin  
2019-04-22 03:21:42,784 http-nio-8095-exec-12 ERROR \[atlassian.crowd.plugin.RequiredPluginsStartupCheck\] Required plugin is disabled: com.atlassian.soy.soy-template-plugin  
2019-04-22 03:21:42,784 http-nio-8095-exec-12 ERROR \[console.action.setup.Database\] Setup cannot continue because some required plugins are not available: \[Crowd REST API, Atlassian Plugins - Web  
Resources - Implementation Plugin, Atlassian UI Plugin, Atlassian Soy - Plugin\]


Answers:
author: Kurt Klinner
body: [@GWOS](/t5/user/viewprofilepage/user-id/612892)

Hi Hans

which jdk version are you using? In the past there have been similar reports from users, trying to use JDK 10 with Crowd (JDK 8 is certified, see <https://confluence.atlassian.com/crowd/supported-platforms-191851.html>)

Cheers

Kurt
Howto disable Crowd welcome page
Asked by Philipp Kayser:

Is there any way to disable the crowd welcome page?

![Atlassian_Crowd_-_Identity_management_for_web_apps.png](/t5/image/serverpage/image-id/52488iE55765D62CEA2731/image-size/large?v=v2&px=999 "Atlassian_Crowd_-_Identity_management_for_web_apps.png")


Answers:
author: Bruno Vincent
body: Hi [@Philipp Kayser](/t5/user/viewprofilepage/user-id/1154375)

Yes, there is. Please apply the following instructions: <https://confluence.atlassian.com/crowdkb/redirect-crowd-server-setup-page-to-crowd-webapp-login-page-839978419.html>

comments: author: Philipp Kayser
body: Thanks.

Sadly, in our installation with docker, the paths are completely different...


author: Bruno Vincent
body: Can you edit *apache-tomcat/webapps/ROOT/index.html* ?

If you can, replace its content with a simple JavaScript redirection:

```
<html>

  <head>

    <script type="text/javascript">

      window.location = window.location + "./crowd/";

    </script>

  </head>

  <body>

  </body>

</html>
```

That will do the trick.


author: Philipp Kayser
body: OK Thanks!

In the docker image i've found the index.html here:

/opt/crowd/splash-webapp/index.html

Now, its working :)
Crowd : Unable to select MySQL during Database configuration
Asked by S?rya KARUNAGODA:

Hi,

I have followed every steps of the configuration in order to setup a connection to a MySQL 5.7 database, but when I validate the setup form I get this error next to the Database select field: "The selected database type is invalid."

I found nothing about this error anywhere on the web.


Answers:
author: S?rya KARUNAGODA
body: I resolved this issue by setting the file rights for that file and restart Crowd service with same attributes as similar files. (I also reinstalled Crowd from scratch before, just in case)

chown root:root /opt/atlassian/crowd/apache-tomcat/lib/mysql-connector-java-5.1.47.jar

chmod 664 /opt/atlassian/crowd/apache-tomcat/lib/mysql-connector-java-5.1.47.jar

sh /opt/atlassian/crowd/stop_crowd.sh

sh /opt/atlassian/crowd/start_crowd.sh


author: Dave Theodore [Coyote Creek Consulting]
body: Did you install the MySQL driver (Step 2 in the [documentation](https://confluence.atlassian.com/crowd/mysql-for-crowdid-60588040.html)?) Oracle no longer allows distribution of the driver, so you have to manually install it.

comments: author: S?rya KARUNAGODA
body: I did that of course.

What resolved my issue was setting the right rights for that file and restart Crowd service.

chmod 664 /opt/atlassian/crowd/apache-tomcat/lib/mysql-connector-java-5.1.47.jar

sh /opt/atlassian/crowd/stop_crowd.sh

sh /opt/atlassian/crowd/start_crowd.sh


Tags: administration

mysql
Accessing a User's Manager from their synced profile
Asked by EHardy:

Currently using Atlassian Guard to sync data over from our Azure AD.  
We've added Manager, Department, and Job Title to the synced fields in Entra and the information from the user's account in AD is visible in the Jira Profile. However we have not been able to find a way to reference these fields within the ticket.  

For example: User creates a ticket that will require approval from their manager. On create, we would like to automatically assign the manager as the Approver. We currently have JMWE and Scriptrunner active on our sites but when testing via JMWE with

```
{{issue.fields.reporter | dump(2)}}
```

it only returns Self, accountId, AvatarUrls, displayName, active, timeZone, accountType, and _accountId.  

Ideally we would like to be able to reference at least the manager name for the approvals process.

Purchasing additional add-ons to accomplish this was given a hard no by accounting so we're stuck with what we have and hoping to find a way  

Has anyone had any luck in this area?


Answers:
author: Dave Rosenlund _Trundl_
body: Welcome to the Atlassian Community, [@EHardy](/t5/user/viewprofilepage/user-id/3781695) ?

My gut tells me you ought to run this past the JMWE support team at Appfire, but before I send you down that path, do you already own JMWE, or are you evaluating it (and Scriptrunner)?

I ask because you state accounting says no to add-ons, but you just listed two add-ons.

-dave

comments: author: EHardy
body: Hey Dave!  

Yes, we currently have both JMWE and Scriptrunner, they just told us we we can't purchase anything beyond those two, so find a way to make it work lol  

I'm currently running this through JMWE's support as well but since I saw that fields like "Manager" and "Location" were default fields that we could sync over from Entra, I was hoping that there would be an Atlassian default method of calling to those properties rather than depending on a 3rd party.  

-Ethan


Tags: atlassian-guard

cloud

jira-service-management

jira-service-management-cloud
Form Same field different Section
Asked by Myles Boyd:

(Sorry me again....)

I need to create a dynamic form.

I have drop down box (say Field A) with 10 options

Each option can have up to 5 different questions.

I wanted to create a conditional section for each response to Field A

And put the corresponding answers into Answer1, Answer2, Answer3 all the way to Answer5

When I try to add a custom field a second time, it rejects it.

Is there any way to do in Forms or Automations?

Make reporting sooo much easier only have the 5 answer fields


Answers:
author: Shikha Verma
body: Hi, [@Myles Boyd,](#) If I understand your question correctly, then I think you need to create sections in the Jira Forms. (Based on the conditions or Always). Sharing some screenshots for your reference. Use conditional logic to show/hide questions based on dropdown selections. Example: If **Field A** is "Option 1," display **Question 1** , **Question 2** , and **Question 3** . If required, you can map Answers to Standard Fields. Hope this will help you!  

![Screenshot at Sep 04 20-30-53.png](https://community.atlassian.com/t5/image/serverpage/image-id/345573iE4CE5F2D764A8BB3/image-size/large?v=v2&px=999 "Screenshot at Sep 04 20-30-53.png")![Screenshot at Sep 04 20-32-10.png](https://community.atlassian.com/t5/image/serverpage/image-id/345572i948C0F36E07D8100/image-size/large?v=v2&px=999 "Screenshot at Sep 04 20-32-10.png")

comments: author: Myles Boyd
body: Thank you.

I have recreated the sections and asked each Question.

The issue is mapping the answers.

Section 1 conditon X=1

Question

Answer

Section 2 condition X=2

Question

Answer

In both cases I want to map Question to Q1 and Answer A1

So when I produce a report, I only need to use Q1 and A!


Tags: cloud

jira-service-management

jira-service-management-cloud
issue found related to jira notification in the "New Outlook" application
Asked by VAgarwal:

Steps to replicate:-

1. Check the Jira history and observe the final assignee. i.e. "Vipul Agarwal" (Screenshot attached"

![Verify from Main Jira app.PNG](/t5/image/serverpage/image-id/345549iC5C42B37BE0585C2/image-size/large?v=v2&px=999 "Verify from Main Jira app.PNG")

2. Now observe the time in "New outlook" with final assignee.

![Step-1.PNG](/t5/image/serverpage/image-id/345551i622D65FC793D8B8A/image-size/large?v=v2&px=999 "Step-1.PNG")

![Step-2.PNG](/t5/image/serverpage/image-id/345552i21A010480448667D/image-size/large?v=v2&px=999 "Step-2.PNG")

In New-Outlook, it seems that "Deepak Gupta" is the final Assignee but actually "Vipul Agarwal" is final Assignee as per Jira record.

Hope this issue help you!

Connect on my Linkedin profile -

<https://www.linkedin.com/in/vipul-agarwal-a4399685>


Answers:
author: Marc - Devoteam
body: Hi [@VAgarwal](/t5/user/viewprofilepage/user-id/5584191)

This can't relate to Jira.

Microsoft seems to handle the issues in a certain way.

Contact Microsoft in this case.


Tags: cloud

jira-service-management

jira-service-management-cloud
Issues not created via email request
Asked by Aggeliki K:

Hello,  
I would like to ask if I can send requests by email from any account of a specific email domain, ++without having to add the account as jira customer++ ,++as long as this account has a specific domain.++

The case is that I have some accounts of a specific domain that are added as customers and can create ticket when sending email request. But, if the account of the same domain is not added as a customer, when they send email request the tickets is not created and the mail log mentions either

'Sorry, self-signup is disabled for this help center. You need to be invited first.'

or

'You don't have permission to access this service project.'

Here are my settings :

1. ++Customer Access++

![customer access.png](https://community.atlassian.com/t5/image/serverpage/image-id/345526iB31FC666540894A5/image-size/large?v=v2&px=999 "customer access.png")

2. ++Project Permissions++

*** ** * ** ***

*** ** * ** ***

![project permissions.png](https://community.atlassian.com/t5/image/serverpage/image-id/345528iCFA18A183AFCCA06/image-dimensions/574x96?v=v2 "project permissions.png")

3. ++Customer Permissions++

![customer permissions.png](https://community.atlassian.com/t5/image/serverpage/image-id/345530i6A4C72197CE19A21/image-size/large?v=v2&px=999 "customer permissions.png")

Thank you in advance,

Aggeliki Karagioule


Answers:
author: Marc - Devoteam
body: Hi [@Aggeliki K](/t5/user/viewprofilepage/user-id/4190076)

Based on your restricted Channel Access this is not possible.

The needs to be open, or the user with the email address has to be added first.

comments: author: Aggeliki K
body: [@Marc - Devoteam](/t5/user/viewprofilepage/user-id/3796976) Thank you!

Regards,

Aggeliki Karagioule