youngmon/atlassian-qna huggingface dataset:
Crowd / Shibboleth Module installation
Asked by Matt Scales:

Hi,

I downloaded, compiled, and deployed (from the README directions) the Atlassian-recommended Crowd Shibboleth Module listed at [](https://jira.atlassian.com/browse/CWD-75.)<https://jira.atlassian.com/browse/CWD-75>. At least I think I did, I had to stumble my way through it because there are no real directions.

I can't seem to find any directions for configuring Crowd to use it. I am not sure if I am suppose to add it as a "Delegated Authentication" or "Connector" directory (I don't see any new ones listed for either) or something else?

Maybe this doesn't work for Crowd 2.7 at all?

Any help would be appriciated.

Thanks!

Matt


Answers:
author: John Burrows
body: Matt,Any chance you could provide instruction on how to setup SSO in Crowd using the Shib? We use PingFederate SSO, so am wondering if we could utilize same setup to authenticate against that?Thanks,John


author: joe
body: The current development version at GitHub includes a README ([README.TXT](https://github.com/Eduix/crowd-shibboleth-module/blob/68f1ce20a125bbaf370f8c050963f139cdfe6eec/shibboleth-filter/README.TXT)) with some more details about how to configure it to allow authentication against Crowd. The process involves some editing of configuration files.

comments: author: Matt Scales
body: Thanks for the response. I guess I should have mentioned, I followed those directions too. I am not sure what to do next? My Crowd instance didn't seem to change any? Is there any configuration done via the Crowd gui?

I do have some experience configuring Shib config files, but I am at loss here. Am I supposed to install a shib client in that tomcat instance or something else like that? Other stuff that might be obvious to others. :)

Really all I have done is install Crowd (as a demo), configure it to work with a demo jira instance, and follow the directions in the readme.


author: Matt Scales
body: OK, after a little bit of playing around, I have CROWD working with our Shib (actually ADFS) SSO server. Seems to work fine. I think my missing piece was putting it behind a web server (IIS). I couldn't seem to get it to work with tomcat directly.


author: John Burrows
body: Matt,Any chance you could provide instruction on how to setup SSO in Crowd using the Shib? We use PingFederate SSO, so am wondering if we could utilize same setup to authenticate against that?Thanks,John


author: Bryan Karsh
body: I too would like to see someone explain the full steps. We are trying something similar. One other problem we are facing. How do you handle SAML and non-SAML users? For example, using SAML for internal employees is great. But let's say you are an external customer who is currently authenticating against a local crowd directory? How do they log into jira with their local credentials, and other people use SAML? Is it possible to fail SAML and fall into the other authentication mode? Any tips appreciated. Whether that means getting creative with apache redirects or whatever.


Tags: crowd-administration
Crowd group/application mapping
Asked by Christian Schlaefcke:

Hi,

Is there a way of specifying an explicit application/group mapping in crowd?

We are using JIRA, Confluence, Fisheye together with Crowd. In Crowd we use an ActiveDirectory to provide the users to the different instances.

The groups I created are connected to the active directory but stored locally in Crowd. I created the jira groups "jira-users, jira-developers, jira-administrators" and the default groups for the other tools as well.

My Problem: When checking available groups in JIRA I found all from Crowd available groups even the ones for Confluence and Fisheye. I would expect a setting where I can specifiy which groups should be available for an application. Does this already exist somewhere?

In Crowd I found the groups tab under the application settings but this only seem to affect, which users can login into the specific instance.

I was not able to find any hint in the Crowd docs or even here.

Thank you for any hint!

Best Regards,

Christian


Answers:
author: Tiago Comasseto
body: Hi Christian,

At the moment there isn't an option to filter groups/users per application. There is an improvement request for this, but it's closed as it may bring more problems than benefit. However you may post your comments [here](https://jira.atlassian.com/browse/CWD-3329) and our developers can reconsider this decision.

Cheers


author: Peter Van de Voorde
body: Hi Christian,

I had the same question last year, I didn't find a solution then :

[](/questions/189619/making-sure-that-users-who-don-t-have-jira-permission-don-t-show-up-in-jira-when-using-crowd)<https://answers.atlassian.com/questions/189619/making-sure-that-users-who-don-t-have-jira-permission-don-t-show-up-in-jira-when-using-crowd>

I don't think anything has changed since then.

Best regards,

Peter
Crowd user groups
Asked by Korneel Wever:

We're in the process of a merger of departments and re-evaluating our current login setup.

One thing I cannot find in the documentation is where Confluence stores it's user groups.

Ideally I'd have an ActiveDirectory, where credentials are checked against and the groups for Jira/Confluence stored in Jira/Confluence (or Crowd) but not in the AD (as i've been told it does that currenly). Is this possible?

Currently when I try to add a person with AD credentials to a group in Jira, I get an error stating it's read-only.


Answers:
author: Peter Van de Voorde
body: Hi Korneel,

This is certainly possible.

I'm currently managing about 70 groups in crowd with users that are authenticated through LDAP.

All groups are created and managed in crowd and none in LDAP.

Best regards,

Peter

comments: author: Peter Van de Voorde
body: You'll need to add LDAP as a User Directory to Crowd using the Directory Connector. You can select the option to administer the groups locally.


author: Korneel Wever
body: I found it too. In the Directory Connector it just needs the 'copy' checkbox. That should allow it, as then they are local authorisation with AD authentication.

Thanks!


author: BernardoA
body: According to my understanding it's not possible to add an LDAP user to a crowd group.


author: Korneel Wever
body: So if I understand correctly, it's not possible to have a mix between LDAP/CROWD users and 'normal' users in groups in Jira?


author: Tiago Comasseto
body: Hi Korneel,

Regarding the message *read-only* it happens when you try to make an user member of a LDAP group through JIRA web interface. In this situation you should edit the group membership directly in your LDAP interface.

Also, it's not possible to make a LDAP user member of a local group of Crowd.

Cheers


Tags: crowd-administration
Crowd username changes through REST API
Asked by aram.dermenjian:

Now that crowd allows username changes (!!!!) are there any plans to have the rest api be able to handle a username change as well? The API docs haven't been updated on this from what I can tell, and most of the 'trials' I've done to see if it is possible have thus far failed, so I'm assuming it's not implemented yet?


Answers:
author: Caspar Krieger
body: Correct; although we've tested support for user rename in our products, we aren't yet (as of 2.7.0) ready to commit to supporting a particular rename API for third parties.

We'll update the [developer documentation for the REST API](https://developer.atlassian.com/x/DgAl) when that changes.

**Update:** Crowd 2.8.4 will support renaming users via a call to a new `/user/rename` API: <https://jira.atlassian.com/browse/CWD-3388>

(I'm a developer on Crowd.)

comments: author: aram.dermenjian
body: BTW do you have an 'ish' timeline for that? (like sometime soon, maybe over the summer, next year, or sometime this century lol Just so we know if we need to find workaround now or hold off a little)


author: Graham Bakay
body: Is there a JIRA issue tracking this?


author: Caspar Krieger
body: Thanks for the nudge (and sorry Aram, I must have lost or overlooked the notification email from your last comment); I've raised \[CWD-4069\|<https://jira.atlassian.com/browse/CWD-4069>\] to track this.


author: Caspar Krieger
body: .. <https://jira.atlassian.com/browse/CWD-4069> that is - turns out Confluence questions doesn't seem to support any way of setting link text from a comment yet, so my attempt to use wiki markup failed ;)


author: Nakhil Bhandari
body: Hi,

Is there any update as to when crowd 2.8.4 will be released.


author: MattS
body: Caspar or any Atlassian involved with Crowd - is this feature available yet? The JIRA issue referred to doesn't seem to apply to the question here.

comments: author: Caspar Krieger
body: Now implemented, but not yet released at time of writing; see the update in my answer.


author: Takayuki Hirota
body: I want to execute bulk username change. REST API is not available now, so I'll try to execute my custom SQL which update cwd_user and cwd_membership. Is there any problem?

comments: author: arunicsbit
body: Were u successful with ur SQL update in those 2 tables? Did it work ?


author: Takayuki Hirota
body: It looks like successful with custom sql updating 2 tables, but we want to wait official crowd-2.8.4 release.


Tags: authentication

crowd-administration

user
Jira's Crowd
Asked by Bill Mariasoosai:

Jira is running with its own version of Crowd.

We would like to use "Crowd" for SSO across all atlassian poducts.

1) Should we install Crowd separately for SSO purpose?

2) If so, what is the differnce betwen the "**crowd that comes with Jira"** and

the **"Crowd used for SSO"** across all atlassian poducts.

Thanks for your help.

Bzoo


Answers:
author: Nic Brough -Adaptavist-
body: The Crowd that comes with Jira is a cut-down embedded system that really only works inside Jira. It doesn't have a management interface (it uses the user stuff in Jira), external exposed integration points, connectors, aliasing or SSO facilities. It really is just "maintain users in this application".

comments: author: Bill Mariasoosai
body: Hi Nic:

Thanks a lot for your quick response.

Regards,

Bzoo


author: Tiago Comasseto
body: Hey Bill,

Regarding your questions:
> 1) Should we install Crowd separately for SSO purpose?

Yes, in order to configure SSO between Atlassian products you should install the [Crowd application](https://www.atlassian.com/software/crowd/overview) in its full version.
> 2) If so, what is the differnce betwen the "**crowd that comes with Jira"** and
>
> the **"Crowd used for SSO"** across all atlassian poducts.

The Crowd embedded plugin that is shipped with JIRA is a small version of Crowd application and has less functionalites.

I hope it helps.

Cheers

comments: author: Bill Mariasoosai
body: Hi Tiago:

Thanks a lot for your quick response.

Regards,

Bzoo
OAuth support in CROWD
Asked by Brett Veenstra:

Does Crowd support OAuth for claims-based identity and authorization?


Answers:
author: darylchuah
body: Hi Brett

Currently Crowd do not support OAuth authentication yet. However there is already an improvement reqeust being raised in here: [](https://jira.atlassian.com/browse/CWD-2325)<https://jira.atlassian.com/browse/CWD-2325>

Please feel free to vote on it to increase its popularity and add yourself as watcher in order to receive any latest updates from the developer and feedback from other user that is facing the same issue.

comments: author: Brett Veenstra
body: Thanks for the quick reply Daryl. The link you provided is protected however - I'm seeing a Permission Violation when trying to load it.


Tags: crowd-administration
I want to connect crowd to a large Active Directory with local groups
Asked by Jan-Christian Arnold:

Hello

I'm looking for a way to use delegated auth with local groups.

I know you can synch connector, but the directory is much larger than my crowd license. So for a synch I get an error.

Only a small fraction of the AD users will use the services behind crowd!So I'm looking for a delegate auth with local groups.

Does anyone have a solution?

Thanks


Answers:
author: Jan-Christian Arnold
body: Hi guys,

thanks for your replies!

your are both so right, but I could not see. My "problem" was that I deactivted the permissions for user and group creation. I did that because I'm connecting to an read-only AD, so I thought.

What I didn't grasp was that**the Permissions are only valid for the crowd part of directory!**

Maybe you can add such da description to the wiki page [](https://confluence.atlassian.com/x/HIGlBw)<https://confluence.atlassian.com/x/HIGlBw>


author: Caspar Krieger
body: Crowd's Delegated Authentication directory should allow you to specify the groups locally (i.e. in Crowd). Is there a reason why this doesn't work for you?


author: Tiago Comasseto
body: Hi Jan-Christian, since you're intending to have ony a small fraction of the users from your AD, maybe a good solution for you is [reduce the scope](https://confluence.atlassian.com/display/CROWD/Restricting+LDAP+Scope+for+User+and+Group+Search) of your LDAP directory in Crowd.

I hope it helps.

Cheers


Tags: crowd-administration
can I get an export from OnDemand for Crowd?
Asked by Isaac Montes:

We are migrating JIRA and Confluence to standalone levering Hosted Crowd. I was wondering if we can get an export from OnDemand Crowd that is used to manage the users for the applications. This would make the migration simpler.


Answers:
author: Michael Knight
body: Yes, we can provide you with CSV exports of users and group memberships that you can import into a self-hosted Crowd. You can request this by [contacting Support](https://support.atlassian.com).  

comments: author: Isaac Montes
body: Good to know, Thanks.


Tags: cloud

crowd-administration
Application does not exist
Asked by Atlas Zhang:

Is anybody can help me?

Downloaded the crowd atlassian-crowd-2.7.0-war.zip OK

Extract the zip file and deployed on glassfish server:OK

start up the crowd Setup WizardOK

get an error at the finally setup : see below

Integrated Applications {#toc-hId-1617890432}
---------------------------------------------

com.atlassian.crowd.exception.ApplicationNotFoundException: Application \<crowd\> does not exist  
Would you like to configure the integrated applications?  
\<label class="fieldLabelArea" style="margin: 0.15em 1em 0px 0px; width: 13em; display: inline; position: relative; float: left; padding: 0px 0px 5px;" for="configureOpenIDServer"\>OpenID Server:\</label\>  
\<input type="radio" name="configureOpenIDServer" value="true"/\> True \<input type="radio" name="configureOpenIDServer" value="false" checked="checked"/\> False  
The Crowd OpenID Server will allow you to authenticate using your standard Crowd logins with OpenID enabled websites.  
\<label class="fieldLabelArea" style="margin: 0.15em 1em 0px 0px; width: 13em; display: inline; position: relative; float: left; padding: 0px 0px 5px;" for="configureDemoApp"\>Demo Application:\</label\>  
\<input type="radio" name="configureDemoApp" value="true" checked="checked"/\> True \<input type="radio" name="configureDemoApp" value="false"/\> False  
The demo web application highlights best practices when using the Crowd framework. The Crowd download archive contains the entire source to the demo application, which can be used as an example when integrating your web applications.  
\<input class="button" style="width: 85px;" type="submit" value="Continue \>\>"/\>

If the both selected **False**: get HTTP Error 404

and then every time I try to open [http://localhost:8080/crowd](http://localhost:8080/crowd,), get same problem.

Have no idea how to fix this problem. This trouble me a long time, Anybody can help me? Thanks


Answers:
author: Caspar Krieger
body: Sounds like something didn't go as planned in the setup process, but it's hard to tell what's wrong from so little information.

I suggest you [open a support request](https://support.atlassian.com/) so our friendly support team can help you troubleshoot and get you going.

comments: author: Atlas Zhang
body: I fixed this problem by modify the database collate to utf8_bin, And now I can complete the setup wizard, But I can not login as previous setting default username and password

The login box keep pop up everytime when I filled and tryed to login, Is there any problem?


author: Ryan Goodwin
body: What Tomcat and JDK versions are you using?

comments: author: Atlas Zhang
body: I fixed this problem by modify the database collate to utf8_bin, And now I can complete the setup wizard, But I can not login as previous setting default username and password

The login box keep pop up everytime when I filled and tryed to login, Is there any problem?


Tags: install
How to Create a problem ticket directly from resolved P1/P2/P3 incident ticket in JIRA Sandbox
Asked by Singh, Priyanka:

In Current JIRA environment we do have an option to create a Problem ticket directly from a resolved P1/P2/P3 incident. Whereas when I am trying to do the same in JIRA Service Management Sandbox, it does not provide me an option to do so. Please find attached reference of Current JIRA environment and the UAT sandbox and the missing Create Problem Option in new Sandbox environment![New JIRA UAT.PNG](/t5/image/serverpage/image-id/338014i895E07005D5312E6/image-size/large?v=v2&px=999 "New JIRA UAT.PNG")![Current JIRA.PNG](/t5/image/serverpage/image-id/338013i0A8BF0F563A64A2C/image-size/large?v=v2&px=999 "Current JIRA.PNG").


Answers:
author: Trudy Claspill
body: Hello [@Singh, Priyanka](/t5/user/viewprofilepage/user-id/5552902)

Welcome to the Atlassian community.

Are the two issues the same issue type? If not the the two issue types may be using different workflows.

Click on the View Workflow option you see on in the transitions list in each screen. Are the Workflows revealed identical?

If the project in the sandbox was creating using the Jira Cloud Migration Assistant it could be that there was something in the workflow that was not supported in Cloud and the original workflow could not be migrated. In Cloud the issue type may now be using the Default workflow in the Workflow Scheme for that project.


Tags: cloud

jira-service-management

jira-service-management-cloud
Permissions for virtual agent
Asked by Graham Moore:

Has anyone discovered a way to manage agent's permissions to create intents and flows for the virtual agent, without giving them a project admin role that allows them to update other features in their project?


Answers:
author: Fernando Eug?nio da Silva
body: [@Graham Moore](/t5/user/viewprofilepage/user-id/5300800)

As the Virtual Agent is part of the project configurations, for now it is not possible to provide this flexibility for other agents to create or edit intents or flows without them having at least project admin permission.

You can open a ticket to Atlassian Support requesting this as suggestion for new feature if you want it :)

comments: author: Graham Moore
body: I thought as much! Thanks for confirming ?


Tags: cloud

jira-service-management

jira-service-management-cloud
Ferramenta para controle de ativos
Asked by elizandradias:

Oi pessoal, algu?m conhece uma ferramenta com agente para controlar os ativos e acess?rios de uma empresa?

Atualmente utilizo o OCS Inventory, ? um programa que ap?s instalado nos computadores da empresa, nos informa o nome de cada computador, localiza??o, modelo, n?mero de s?rie, softwares instalados, etc.

Gostaria de uma ferramenta similar que me traga essas informa??es.


Answers:
author: Fernando Eug?nio da Silva
body: Ol?, [@elizandradias](/t5/user/viewprofilepage/user-id/5225166) , bem vinda ? comunidade Atlassian!

A Atlassian oferece um recurso chamado **Assets** para ambientes que possuem o Jira Service Management na vers?o Premium. O Assets ? uma ferramenta de gest?o de ativos que pode funcionar bem para a descri??o que voc? deu, principalmente se utilizada em conjunto com o app/plugin chamado **Assets Discovery**.

O Assets por si s? funciona como uma plataforma de gest?o desses ativos, n?o faz o scan que o software que voc? possui faz hoje. Mas acredito que combinando com o Assets Discovery voc? pode ter algo mais pr?ximo do resultado que tem hoje.

O **Assets Discovery** apesar de ser um app, ele ? gratuito quando o ambiente possui o Assets como recurso aplicado.

Recomendo fortemente a leitura sobre o Assets aqui: [Um guia sobre gest?o de configura??o e recursos com o JSM (atlassian.com)](https://www.atlassian.com/br/software/jira/service-management/product-guide/getting-started/asset-and-configuration-management)

Al?m disso, d? uma olhada tamb?m sobre como funciona o Assets Discovery: [Assets Discovery \| Atlassian Marketplace](https://marketplace.atlassian.com/apps/1214668/assets-discovery?hosting=cloud&tab=overview)

Espero que isso ajude.

Atenciosamente,

Fernando


Tags: cloud

jira-service-management

jira-service-management-cloud
Uninstalling Office 365 Integration
Asked by Jeff Kanzler:

Hi. I am the admin for our organization, but the option to uninstall an Office365 integration is greyed out. Anybody encounter this and able to assist?  

Thanks!


Answers:
author: Joseph Chung Yin
body: [@Jeff Kanzler](/t5/user/viewprofilepage/user-id/5552814) -

Welcome to the community. It seems this is related to a third party add-on in your env. You have to be the site admin/Jira admin to have the ability to manage add-ons.

Hope this helps.

Best, Joseph Chung Yin


Tags: cloud

jira-service-management

jira-service-management-cloud
REMOVE THE MENU PROJECTS IN THE TOP BAR
Asked by Isaac Ortiz:

HI,

I NEED TO REMOVE SOME MENUS THAT ARE IN THE TOP BAR, NOT ONLY FOR ME BUT ALSO FOR THOSE WHO I SEND TO PARTICIPATE IN THE PROJECT, I JUST WOULD LIKE YOU TO SEE THE TICKETS CREATED, ASSIGNED, THE CREATION OF THE TICKETS.

I NEED TO REMOVE THE MENU PROJECTS, TEAM, APP IN THE TOP BAR

BEST REGARDS,

ISAAC


Answers:
author: John Funk
body: HI Isaac - Welcome to the Atlassian Community!

First, no need to shout. :-)

Next, please share some screen shots of exactly what you are referring to. But also, 99% chance you are not going to be able to change those.


author: Akshat Jain
body: Hi Isaac,

Permissions and interface settings can be adjusted to further customize the top bar and limit options in menus for all users---including yourself and those participating in a project. Note that some of these items on this list, such as the "Projects" and "Teams" menus, cannot be removed---although they can be minimized or hidden depending on your Jira plan and permissions.

* **Permissions and Roles:**   
  Go to project settings and adjust permissions, which limits access to some features, helping prevent access to things such as "Projects" or "Teams."
* **Configuration of Application Navigation:**   
  As an admin, Application Navigation can be configured at Jira Settings \> System \> User Interface \> Application Navigator. Adjust the visibility and order of links to your liking.
* **User Interface Customization:**   
  For greater granularity, especially in Jira Cloud, there are options to hide or customize top bar menus under Settings \> System \> User Interface.

Although some menus cannot be fully removed due to Jira's default settings, the following steps should at least help in controlling user access and visibility. Consider using permissions to limit what users can view or do if specific menus cannot be removed.

comments: author: John Funk
body: [@Akshat Jain](/t5/user/viewprofilepage/user-id/5550015) - This does not appear to be correct information. Can you provide the source? The question is about Jira Cloud.


Tags: cloud

jira-service-management

jira-service-management-cloud