youngmon/atlassian-qna huggingface dataset:
External user authentication for multiple statuspage instances under an organisation
Asked by Stephen Byrnes:

Hi,

When running multiple status page instances under a organisation is it possible that each status page instance can be SAML connected to a 3rd party IDAM solution (Azure AD).

Would this grant access to anyone within the organisation as well as a read only view to the SAML users ?

Can each status page instance be linked to a different (unique) 3rd party SAML IDAM provider?

Thanks,

Stephen.


Answers:
author: Gonchik Tsymzhitov
body: Hi!

As I see the best way is link to a different unique SAML provider
Export / Report All Component Availability Metrics
Asked by Navinderpal Singh:

Hello, I wanted to know how I can export all of our Statuspage component availability metrics into a report. We can all see them on the GUI and that is great but when I have to report these to executive management, they want spreadsheets and charts. So I looked around and could not figure out how to do this. This would be ad-hoc reporting so I could pull availability metrics for all components daily, weekly, monthly, quarterly and yearly and have that data output to a spreadsheet like Excel or Google Sheets for example.


Answers:
author: Mark Campbell-Vincent
body: Hi [@Navinderpal Singh](/t5/user/viewprofilepage/user-id/3323284) -

Although we do show the uptime history in the Statusapge UI, there currently isn't a feature that allows you to export component availability metrics.

Our API document allows you to make requests to get the uptime showcase of components, but other than that, this isn't something that Statuspage has natively. I've provided the API document you can refer to: <https://developer.statuspage.io/#operation/getPagesPageIdComponentsComponentId>

Hope this helps!
Can font icons like Fontawesome be used?
Asked by john_chong:

Hi,

We would like to use font icons with our status page. Is there a pre-existing set baked into the application?

Thanks,

John


Answers:
author: Mark Campbell-Vincent
body: Hi [@john_chong](/t5/user/viewprofilepage/user-id/4213590) -

Welcome to the Statuspage community! Font icons can be used by embedding the Fontawesome CDN code in the head section of "Custom header HTML". Once that is added, you can input your font icon code to your preference.

![Statuspage_-_Customize_page_and_Slack___sp-feedback___Atlassian.png](https://community.atlassian.com/t5/image/serverpage/image-id/124750iC39BB9D50F598D9A/image-dimensions/451x330?v=v2 "Statuspage_-_Customize_page_and_Slack___sp-feedback___Atlassian.png")

Hope this helps!

comments: author: john_chong
body: worked the first time! thanks!


author: Tim Dolson
body: [@Mark Campbell-Vincent](/t5/user/viewprofilepage/user-id/2365445) Hey Mark. I understand the above but how do I replace, for example, the Statuspage default fa-check icon to the fa-circle-check icon?


Tags: cloud
Looking for customization of "Impact" and "Incident Status"
Asked by Matt Pippenger:

My company has their own way of categorizing incidents (P1, P2, etc.). Is there a way I can customize the Impact field to use what I want, versus the pre-set "Minor", "Major", "Critical"? Also looking for the same answer regarding "Incident Status".

Thanks!


Answers:
author: Walter Buggenhout
body: Hi [@Matt Pippenger](/t5/user/viewprofilepage/user-id/4213447),

I don't think they are customisable inside the product itself as StatusPage has built-in calculations to roll up impact and component status to the top level.

A recommended approach I could find to customise them is through CSS or Javascript snippets. Examples can be found through [this support article](https://support.atlassian.com/statuspage/docs/css-and-javascript-snippets-for-customizations/)

comments: author: Matt Pippenger
body: Appreciate the info, thanks.


Tags: cloud
Can't connect New Relic to Statuspage
Asked by Valentin Prugnaud:

I am trying to setup the New Relic third party system metrics with our status page, but the API key is not accepted.

I keep running into this error:

```
Remote validation of your credentials failed, or you have no applications associated with your account.
```

I checked, we have around 1300 APM metrics in New Relic.


Answers:
author: Ilya Chatsviorkin
body: Same issue, did you find a solution?

comments: author: PeterE
body: The solution is to add your "Rest API" key, not the new "User API key". It is a bit hard to find, but if you add your account number to this link, it should get you there:

[https://rpm.newrelic.com/accounts/\[ACCOUNT](https://rpm.newrelic.com/accounts/[ACCOUNT) NUMBER\]/integrations?page=api_keys

<br />

But bottomline;

The integration is outdated, as is uses the New Relic V1 Rest API, so you cannot add uptime metrics, as this is part of synthetics. I think Atlassian should take a note and update this integration, so we are able to use all the latest New Relic metrics on the status dashboard.


author: Pir8Radio
body: same issue, and im using the API key found bottom right. I get the same error.. Is there some kind of delay between creation and when you can actually use the API key?


author: alessandro_pezz
body: bump


author: Nicolai Lindholm
body: Is there any update on this? I currently can't connect status page with new relic as it looks like the api versions are different?

I just signed up to statuspage as well and without this integration I can't use the product.


Tags: cloud
Using the API - Separating Prod from Non-Prod
Asked by David Purcell:

We'd like to primarily do an integration with our products and the Statuspage API. To do that, we want to have separation between development/testing and production - we don't want to have an API key used in development that could accidentally post to production.

We initially thought we could use two different pages: a prod page and a non-prod page. However, we have the following obstacle: There doesn't seem to be an association between an API key and a page. The API keys have access to all pages associated with our 'organization'.

Two questions:

1) What is the best way to keep this separation? Can we have two different 'accounts' that are not tied together in any way?

2) Since we want to use the API but not publish a status page, do we have to activate the pages to use the API?

Thanks.


Answers:
author: chare
body: So I only just started experimenting with additional pages. the plan you are on determines how many public pages you can have. It does appear you can have pages which are not-activated, meaning they are not public. This is a new space I am looking at so I can't be more specific.

But it looks like you can have more than one API key. In manage.statuspage.io click on your profile avatar in the bottom left of the sidebar.

![Screen Shot 2021-01-06 at 7.23.17 AM.png](https://community.atlassian.com/t5/image/serverpage/image-id/124346iAAC5E32C2D693B9A/image-size/large?v=v2&px=999 "Screen Shot 2021-01-06 at 7.23.17 AM.png")

Click on API Info and then click on "Create Key"

![Screen Shot 2021-01-06 at 7.23.29 AM.png](https://community.atlassian.com/t5/image/serverpage/image-id/124347iA0FEA0C933DD2273/image-size/large?v=v2&px=999 "Screen Shot 2021-01-06 at 7.23.29 AM.png")So I think you can accomplish what you are trying to do. However, I don't think you can prevent one key from only being able to update one page and not be able to update a different page. But if you are using automation to update your pages, then using a different API Key and Page ID in your automation, you could get close.

Chris

comments: author: David Purcell
body: Thanks Chris. Unfortunately, close isn't probably good enough. I did experiment with using two different email addresses to create two different pages, totally separate from each other. I then tried to grant one of my users access to the other page, and when I do that, the system mysteriously creates an 'organization' (something that you can't seem to manage, and I don't know how it names the organization, other than using the first word of my page name), and I can jump between the organizations. That might be the best we can do, but I'd like to remove the mystery from this and understand what it is doing.


author: chare
body: Well, I suppose yo could have two different accounts which are not connected. then you'd up with completely different API key and page IDs. You also end up with different URLs, which may or may not be manageable. I don't really know if you can do what you are trying to accomplish unless yo go to a paid plan where you can get some "real" tech support. :-)


Tags: cloud
Can status page support multiple regions (pods)
Asked by Jordan Rosenwein:

Hey there,  

Jordan here. I hope your team is doing well and had a beautiful holiday season and new year.

<br />

Our team is introducing a new EU production environment, which will impact the future of our status page. As we adding another dimension now to the whole system, we need to report and display US and EU region's differ in terms of incidents and SLA.

<br />

Is it possible to break down our status page into regions? Is it possible to have notifications separate for each region? Let me know and we'd be happy to discuss further!


Answers:
author: chare
body: I you want to experiment without having to move to a paid plan and can live without regional notifications, you can create different component groups and put your regional components into those groups. Bear in mind, there is a limit of 25 components on the free plan. So, depending upon other requirements, you may need to migrate to a paid plan to either provide the separation you want, or because of the number of components you are tracking.


author: Carmen Nadeau
body: Hi,

Yes it is possible to do that. You need an audience specific page. It is not possible for a public page.

<https://support.atlassian.com/statuspage/docs/what-are-audience-specific-pages/>

Or you can create a new page for them if the page need to be publi.
Email notifications floating out to random users even though it is disabled
Asked by Ravi Jethva:

Experts,

Please assist me in a situation here.

I have created a Private Page (No Subscriptions yet) and the Long running Component alert is being sent to every Atlassian users in the organizations even though they aren't added in the Subscribers list.

It is also fishy to see none of the subscribers when it says 2 of 25 Subscribers.

Moreover, under Subscribers -\> Options -\> Settings, all notifications are Disabled and yet it floats out to random users in the organization.

Please refer to the screen captures as attached and revert if there is any other configuration that is missing to be set and also if it needs to be done by a Site Admin.

Any help would be highly appreciated.

Thanks!


Answers:
author: Mark Campbell-Vincent
body: Hi [@Ravi Jethva](/t5/user/viewprofilepage/user-id/4206618) -

The long running component email being received are not for subscribers, they are for team members in your Statuspage organization. Their profile settings have this enabled by default. To disable this, each team member will need to go to Profile, and toggle off the "Long-running degraded component notifications" for the page.

![Statuspage_-_Profile_and_Email_notifications_floating_out_to_random_users_e___.png](https://community.atlassian.com/t5/image/serverpage/image-id/123884iA66A11DADC0DE77D/image-dimensions/357x242?v=v2 "Statuspage_-_Profile_and_Email_notifications_floating_out_to_random_users_e___.png")

Hope this helps!

comments: author: Ravi Jethva
body: Thank you, Mark Campbell-Vincent.

Yes, it is true that individual's configurations are leading to them receiving emails.

However, for instance, say I have created two pages and I would want to disable alerts for one of the pages irrespective of what individual user's configuration is.

So, when the email notification for this particular page is Disabled, should not this stop notifications even if user's profile is set to receive alerts? We hoped it would behave this way.

If this is not currently in practice, please take this as a feedback that whenever notifications from the page is Disabled, it does not send email notifications even though user is set to receive one.

Thanks!


author: Mark Campbell-Vincent
body: Thanks for your response [@Ravi Jethva](/t5/user/viewprofilepage/user-id/4206618) -

Since **subscribers** and **team members** are two different type of users, disabling a setting for a subscriber does not necessarily apply to team members. Subscribers receive notifications regarding the incident while team members receive notifications that the incident/component is long running. Disabling email notifications for subscribers does not override the long running notifications for team members because team members are admins on the account. Subscribers are only users subscribed to the page.

Hope this clarifies your question.


Tags: cloud

email
Is it possible for crowd to manage group access in to certain spaces in confluence or projects in JIRA?
Asked by Jesse Callejas:

My company has JIRA, Confluence and Bitbucket installed, and I just installed Crowd to be able to administer better my users. So far Atlassian litterature talks about managing groups to control access to applications.

Is it possible for crowd to control groups and access to say spaces in confluence?

Thanks for all your help

Every bit of it is greatly welcome.

Jesse


Answers:
author: Bruno Vincent
body: Crowd allows you to manage users and groups. Then fine-grained permissions have to be defined on the application side. For instance, you might want to create a group called F*ooSpace-users* in Crowd and then give this group the view right on *FooSpace* in Confluence's admin console: <https://confluence.atlassian.com/doc/assign-space-permissions-139460.html>

comments: author: Jesse Callejas
body: Thank you Bruno for your answer, I understand that now, however Do I have to create a new directory for every application I want to integrate with crowd? or I can just create groups within the same directory?

Thanks for your help again

Cheers


author: Bruno Vincent
body: Hi Jesse,

You don't have to create a new directory for every application. You can definitely create groups within the same directory. For instance, you might have a group called *projectManagers-users* that will be used both in JIRA and Confluence.

Best regards,

Bruno


Tags: crowd-administration
How to bulk update user details in crowd?
Asked by Pushpkant Garg:

We have many existing users in crowd with incorrect email addresses. How can I bulk upload users email address?

I can import users via CSV importer but can't update existing ones.


Answers:
author: Bruno Vincent
body: You can use [Crowd REST API](https://docs.atlassian.com/atlassian-crowd/latest/REST/) for this.

For instance you might want to use the following Groovy script to update a set of email addresses:

```
import groovyx.net.http.RESTClient  def applicationName = "myapp"def applicationPassword = "mypassword"  def client = new RESTClient( "http://localhost:8095/crowd/rest/usermanagement/1/".toString() )client.auth.basic applicationName, applicationPassword  def users = ['john':'john@example.com', 'jane':'jane@foo.com', 'bob':'bob@bar.com']  users.each{ username, email -&gt;       def body = "&lt;?xml version=\"1.0\" encoding=\"UTF-8\"?&gt;&lt;user name=\"$username\"&gt;&lt;email&gt;$email&lt;/email&gt;&lt;/user&gt;"                               def response = client.put(path: "user",                               requestContentType: 'application/xml',                               query:['username': username],                               body: body)                                  assert response.status == 204}
```


Tags: crowd-administration
Does Crowd support ADFS, SAML or OAuth?
Asked by shreyas racherla:

Hi,  
We're planning to move our atlassian prodcuts: JIRA, Confluence, Hipchat and Bitbucket to on server installation from cloud installation.  
I've read that crowd supports SSO for all these products.  
Are there any best practices to implement single sign on across these products?  
Does Crowd support ADFS, SAML or OAuth? or OKTA integration?

Or Does OKTA support SSO for all these products?

<br />

Thanks,  
Shreyas.


Answers:
author: Bruno Vincent
body: Hi Shreyas,

Well, yes, Crowd is definitely the recommended product for SSO between your Atlassian applications.

As of today, Crowd only supports SAML for [Google Apps integration](https://confluence.atlassian.com/display/CROWD/Configuring+the+Google+Apps+Connector). ADFS and OAuth are not officially supported though you could extend Crowd's functionality with a custom [plugin](https://developer.atlassian.com/display/CROWDDEV/Developing+Plugins+for+Crowd) (Google Apps' connector for Crowd is actually a plugin). Please also note that Crowd does support [OpenID](https://confluence.atlassian.com/display/CROWD/Integrating+Crowd+with+Atlassian+CrowdID).

If you were aiming at Windows (Kerberos/Active Directory) authentication with ADFS/SAML/Okta integration, you can use the [IWAAC](https://marketplace.atlassian.com/plugins/com.cleito.iwaac/server/overview) plugin instead.

Best regards,

Bruno

comments: author: Emil Varona
body: Hi[@Bruno Vincent](/t5/user/viewprofilepage/user-id/853568), Is there any update to your response? We're using Crowd against AD for internally hosted apps and I'm looking to see if we can put Okta in front of this combo.

Thanks.


author: Bruno Vincent
body: Hi [@Emil Varona](/t5/user/viewprofilepage/user-id/282202),

As of today (Crowd 3.0.1), my response is still valid. However I don't work for Atlassian and thus I can't speak for Crowd's development team. Maybe they have such features on their radar. They're soon organising a [webinar](https://www.atlassian.com/webinars/software/centralize-identity-management-using-crowd-data-center) about Crowd Data Center, I think it's worth registering as they might give some perspectives on future versions of Crowd.

In the meantime, if you absolutely want to integrate your hosted apps with Okta, you might want to take a look at Okta's integration guides for [Jira](https://support.okta.com/help/Documentation/Knowledge_Article/29583593-Using-the-Jira-On-Premises-SAML-App) and [Confluence](https://support.okta.com/help/Documentation/Knowledge_Article/Using-the-Confluence-On-Premises-SAML-App-250727927). There are also many third-party [SAML plugins](https://marketplace.atlassian.com/search?query=SAML) that support Okta on Atlassian Marketplace.


author: Jennifer Galvin
body: Hi Emil,

IYes, I believe Okta can provide SSO fdirectly to all of the Atlassian applications you mentioned. We also have a user provisioning connector as well. If you need assistance please feel free to contact me at jennifer.galvin at okta.com.


Tags: crowd-administration
Grant access to HipChat rooms based on Crowd groups membership
Asked by Ivan Kovnatsky:

Hi guys, we'd like to choose HipChat as a corporate communication platform. But would like to know if there a possibility of managing granting access to HipChat room based on Crowd group membership.

So that only users, who are in Crowd group jira-project-users have access to HipChat room: #project-users

Is this possible?

Ivan.


Answers:
author: Anatoli
body: Not possible right now.

@Rahul Asave, is it something we are considering in the future?


Tags: hipchat

permission

user-management
How do I exclude LDAP groups from Crowd
Asked by Owen Manske:

I am using and ldap connector to Active Directory. I want all the users from my base DN but not the groups. I want to create the groups in Crowd and manage group membership in Crowd.

I have the "Manage groups locally" option checked on the Connector tab of the Ldap directory config page. But I want to see none of the groups from AD. Is this possible?


Answers:
author: Bruno Vincent
body: Yes, it is.

Go to the Group configuration tab of your Active Directory connector in Crowd's console. Then, change the Group object filter into an LDAP filter that won't return any group:

```
(&amp;(objectCategory=Group)(cn=thisgroupsdoesnotexist))
```


Tags: crowd-administration
How do I give Admin Rights to an AD User in Crowd?
Asked by Gerald Schneider:

I have a Crowd instance that has an Active Directory and an OpenLDAP server configured as Directories. I always have to log in with the crowd internal root user for administrative tasks and I want to delegate this access to the admin accounts of my admin users.

These admin accounts already have the necessary in JIRA, Confluence etc. but I can't find a way to give them admin access in Crowd.

I already tried to create a group named "crowd-administrators" in AD, just like in the internal directory, but my admin user still doesn't have admin rights in crowd.


Answers:
author: Bruno Vincent
body: Creating such a group in AD was actually the right thing to do. Please also make sure that this AD group belongs to the list of authorised groups for this application (crowd) in Crowd's console and that the "System administrator" and "admin" boxes are checked.

GroupsTab.pngDirectoriesTab.png

[](https://community.atlassian.com/t5/Crowd-questions/How-do-I-give-Admin-Rights-to-an-AD-User-in-Crowd/qaq-p/107024?attachment-id=11304){#link_1159ab78621f16}  
[](/tnckb94959/attachments/tnckb94959/crowd-questions/465/1/DirectoriesTab.png){#display_1159ab78621f16_0}  
[](https://community.atlassian.com/t5/Crowd-questions/How-do-I-give-Admin-Rights-to-an-AD-User-in-Crowd/qaq-p/107024?attachment-id=11305){#link_1159ab78621f16_0}  
[](/tnckb94959/attachments/tnckb94959/crowd-questions/465/2/GroupsTab.png){#display_1159ab78621f16_2}

comments: author: Gerald Schneider
body: Thanks, that did the trick. I searched everywhere in Crowd except in the application.


Tags: crowd-administration
Unable to configure Single Sign On on "FishEye Crucible 4.0.3" with crowd 2.8
Asked by SUNIL SABALE:

Hi, I am able to integrate FishEye crucible with crowd. I am able to access crucible with centralized authentication from Crowd. But I am not able to get 'Single Sign On' benefits. There is no seraph-config.xml for FishEye Crucible installation. Also there are no options for configuring SSO at UI side.


Answers:
author: Lars Olav Velle
body: Hello Sunil!

Have a look at our Kerberos/ SAML plugin.

Our add-on do not care whether your users are internal, CROWD or AD-synchronized.

There is no need for any modification of configuration files at all!

<https://marketplace.atlassian.com/plugins/no.kantega.kerberosauth.kerberosauth-plugin.fecru/server/overview>

Email us at SSO@kantega.no if you have any questions :)


author: Bruno Vincent
body: Hi Sunil,

SSO has to be enabled in the $FISHEYE_INST/config.xml file as detailed in the following paragraph: <https://confluence.atlassian.com/fisheye/connecting-to-crowd-813695565.html#ConnectingtoCrowd-Singlesign-on(SSO)withCrowd>


Tags: crowd-integration

fisheye-crucible