youngmon/atlassian-qna huggingface dataset:
Cannot remove alias from a user
Asked by Jonathan Bertossa:

I have a crowd user with configured alias for bitbucket, jira and confluence.

Now I need to remove this alias but give me an error when I click the button "Remove alias".

The error is *"Alias \[usernameX\] already in use for application \[jira\] by user \[usernameY\]"*

Has it already happened to you too? Some solutions?

J.B.


Answers:
author: Craig Castle-Mead
body: Hey [@Jonathan Bertossa](/t5/user/viewprofilepage/user-id/2049202)

Which version of Crowd are you running?

And what happens if you go to the Jira application, usernameY? Can you see usernameX listed there?

<br />

CCM


Tags: alias

error
Compatibility of Crowd DC with Jira Software server
Asked by Aya AlJboor:

if my customer has jira software and core hosted on server and want to use Crowd although it is only available on DC; can I use it with the current licenses? if yes, how?


Answers:
author: Nic Brough -Adaptavist-
body: Crowd has a separate licence to Jira, so I'm not sure what you mean by "use with the current licence".

You can run Jira and other Crowd-using applications with Server or DC Crowd, they don't care what the licence is for Crowd.

comments: author: Aya AlJboor
body: thanks [@Nic Brough -Adaptavist-](/t5/user/viewprofilepage/user-id/781454)

my question is: Can I activate a DC crowd with Jira applications hosted on server?


author: Nic Brough -Adaptavist-
body: Again, the licence for Crowd is separate to Jira. They have nothing to do with each other.

Neither system cares what the other one is licenced for.


author: Aya AlJboor
body: thanks [@Nic Brough -Adaptavist-](/t5/user/viewprofilepage/user-id/781454)
how to integrate Confluence and Jira with SSO with OAuth?
Asked by sim.sisavuthary:

Dear Support,

we are using Confluence and Jira on cloud, and we plan to integrate with SSO with OAuth.

could you help guide us on how to do it? and what do we need to do?

what is my IT support need to have in order to do the integration?

Can you use the free trial plugin before we pushing the license for SSO with OAuth?

normally how is the effort to make it done?

thanks,

Thary


Answers:
author: Roman Kovalov
body: Hello [@sim.sisavuthary](/t5/user/viewprofilepage/user-id/4252215) and welcome to the community!

I can recommend you [this guide](https://confluence.atlassian.com/crowd/crowd-sso-2-0-967322291.html) to use Crowd as entity provider for SSO. There is step by step instruction how to integrate Crowd with your application.  
To do that ,make sure you're using Crowd version 3.4 or later, also you need to have Crowd DC license.  
To integrate Crowd with your application you need about 15 minutes.

Hope I answered your question)  
Roman.
Integrate Kibana authentication to Crowd
Asked by Ashok Arunakiri:

Hello,

We looking to use Crowd as IDP or the directory to authenticate against to login to to Kibana +Logstash stack. As we already have integrated Crowd to SCM ,GIT and Jenkins in addition to Jira and confluence I m looking to centralise the authentication with crowd for Logstash as well. At the moment we using X-PACK with kibana. The realms supported for Kibana are listed under <https://www.elastic.co/guide/en/kibana/current/kibana-authentication.html#oidc>

Any guidance is appreciated.


Answers:
author: Roman Kovalov
body: Hello [@Ashok Arunakiri](/t5/user/viewprofilepage/user-id/246971) and welcome to the community.

To enable SSO in Crowd for ELK stack I used this [guide](https://www.elastic.co/guide/en/elasticsearch/reference/current/saml-guide-stack.html#saml-role-mapping).  
I did this steps, and everything worked fine for me:

1) Create generic application in Crowd, and Download metadata file from it (don't forget to add Assertion Consumer URL and Entity ID, it should be default for Kibana):  
![Screenshot 2022-06-17 at 18.52.35.png](https://community.atlassian.com/t5/image/serverpage/image-id/202424iB4D6495B9E8311DC/image-size/large?v=v2&px=999 "Screenshot 2022-06-17 at 18.52.35.png")

2) Put metadata.xml file in your elasticsearch config folder. Then create new [realm](https://www.elastic.co/guide/en/elasticsearch/reference/current/saml-guide-stack.html#saml-create-realm) for saml authentication in *elasticsearch.yml*.

3) Use created realm in [kibana](https://www.elastic.co/guide/en/kibana/master/security-settings-kb.html). You need to change kibana.yml file in kibana's config folder.

4)If you did everything correct, you should see similar login page:  
![Screenshot 2022-06-17 at 19.04.19.png](https://community.atlassian.com/t5/image/serverpage/image-id/202426iDEA67ACC262E6048/image-size/large?v=v2&px=999 "Screenshot 2022-06-17 at 19.04.19.png")  

Hope that will help you.  
If you have any questions, please ask.


Tags: kibana

logstash

server
Error on start up
Asked by Dovid Bender:

Hi,

We are trying to migrate crowd from an old server running CentOS6 to a new server running Oracle Linux. Here is what I did:

1) Stopped crowd on current server.

2) Copied over the application and data directories to the new server.

3) Dumped the database and imported it to the new server.

4) Updated the configs on the server to reflect the new DB and server name.

When I start the crowd application on the new server I get an error of:

|---------------------|-------|----------------------------------------------------------------------------------------------|----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|
| 2021-06-06 20:22:54 | fatal | Crowd has encountered errors while upgrading. Please resolve these errors and restart Crowd. | An error occurred when querying the database \<ERROR: relation "REMOTEGROUP" does not exist Position: 26 Location: File: parse_relation.c, Routine: parserOpenTable, Line: 1160 Server SQLState: 42P01\> |

I am not doing an upgrade. I am merely moving it from one server to another. Any idea what I can be doing wrong?


Answers:
author: Craig Castle-Mead
body: Hey [@Dovid Bender](/t5/user/viewprofilepage/user-id/3030611)

It looks like you may be seeing this issue - <https://confluence.atlassian.com/crowdkb/error-table-crowd-remotegroup-doesn-t-exist-after-migrating-crowd-database-from-another-server-726564970.html>

Follow the Resolution steps from above and see if that helps

CCM
Do I need Crowd for SSO with Jira+Confluence and external IDP
Asked by Kris:

Hello,

I use an external IDP and would like to realize a SSO with my on-prem jira and confluence server. Should I use Crowd or directly configure jira and confluence with SSO 2.0 SAML?

I would like to manage all my user access policy within the external IDP.

The jira and confluence server are behind a firewall and do not have direct access to internet.

What is best practice?


Answers:
author: Kris
body: additional I found out, that I have only Server licence and NOT Data Center.

Is it possible with or without Crowd (Server) to have SAML SSO behind Firewall to connect to jira and confluence?

Or is the only option upgrade to Data Center Version or get third party tools?


Tags: confluence

identity-provider

jira

sso
Crowd user identification
Asked by Carlos Chang:

Hi guys,

I'm using crowd internal user as authentication for Atlassian service like Jira and Confluence.

Now I'd like to switch to external AD, but my concern here that if there exist any potential risk? for example, crowd user create an issue or become an assignee, after AD switch, could Jira recognize the new user in AD if they have the same username. What's the key value for user identification?

Same question for confluence page/space creating and permission inherit.

#data-center #crowd #jira #confluence


Answers:
author: Craig Castle-Mead
body: Hey [@Carlos Chang](/t5/user/viewprofilepage/user-id/4087225)

We've done a significant amount of work with various Crowd directory types and can confirm the answer in <https://community.atlassian.com/t5/Crowd-questions/Crowd-Migrating-from-Crowd-internal-directory-to-Microsoft/qaq-p/131524> is correct. An application connected to Crowd will look at the Application \> Directory mapping, and the first instance of a username that matches will be how that user is authenticated. If you have the same username in multiple mapped directories, then all group memberships are merged - eg: if user@example.com is in group A and B in the first directory and B, C and D in the second directory, while they auth against directory 1, the application will see them as being members of groups A,B,C and D

CCM


author: Brant Schroeder
body: [@Carlos Chang](/t5/user/viewprofilepage/user-id/4087225) I belive this is the answer to your question. <https://community.atlassian.com/t5/Crowd-questions/Crowd-Migrating-from-Crowd-internal-directory-to-Microsoft/qaq-p/131524>

As with any major change, it is always good to test in a development environment beforehand and backup production prior to making the change.


author: Carlos Chang
body: [@Brant Schroeder](/t5/user/viewprofilepage/user-id/769100) Thank you for the info, I've get the idea but still have some questions and I leave comments in the thread.


Tags: confluence

jira-software
Prevent crowd from adding new users to active directory
Asked by John Halstead:

Hi,

We have crowd hooked up to an active directory:

I'm ok with crowd manipulating existing users in the active directory as part of its own organisational unit (thus ensuring you can only manage users of Jira, confluence etc) what I'm not ok with is crowd being able to create new users within active directory. Can it be configured to prevent this?


Answers:
author: Brant Schroeder
body: [@John Halstead](/t5/user/viewprofilepage/user-id/4381955) Welcome to the Atlassian Community.

It has been a while since I have used Crowd. I know when configuring crowd connector you have an option to manage local groups. This allows you to create groups in crowd. Here is information from the documentation.

If you select the **Manage Groups Locally** setting on the 'Connector' tab (available only if you've selected the **Cache Enabled** check box), new groups are created and updated in the Crowd database and not propagated to the LDAP server. Memberships of local groups are also stored locally. This makes it possible to augment the group structure with new groups even with a read-only LDAP server. When this option is enabled, only local groups can be created and updated, while groups synchronized from the remote directory cannot be locally modified.
Crowd Rest API plugin
Asked by aas:

I want to make plugin, which parse file with users from server, and make all that users inactive. I use 2 modules in plugin: Web Item and REST plugin modules. So when I click in to my web item I call my rest plugin module and in it I want to parse file with users and call crowd's rest api to change users PUT https://server/crowd/rest/usermanagment/1/user?username=userFromFile. Problem is that I can't call crowd's rest endpoint from my web plugin module, I always get code 400. Is it right way to call crowd rest endpoint from my rest endpoint or there is other way to make users inactive?


Answers:
author: Steffen Opel _Utoolity_
body: Hi [@aas](/t5/user/viewprofilepage/user-id/3441288)

You have probably figured this out by now, just in case:

App development related questions like this are best asked in the [Crowd Development category](https://community.developer.atlassian.com/c/crowd-development/29) of the [Atlassian Developer Community](https://community.developer.atlassian.com/), you have a greater chance to get feedback from other app developers there.

That said, to set expectations, you'll note that there are comparatively few Crowd related questions and even less answers there - regardless, quite some Atlassian team members monitoring the community by now, so hopefully they can loop in someone from the Crowd team.

Cheers,  
Steffen


Tags: app

rest-api
Crowd account password attempt count for external directories.
Asked by Admin Octavian:

Hi there!

We use Crowd 4.2.2 server in our Enterprise. We have some MS AD directories, connected to Crowd as external. Each AD have own password lockout policy, but all have configured at least 3-4 invalid password attempts before lockout. We noticed, that in all Applications connected to Crowd, user from such directory is locked after 2 invalid attempts, that is much lover then configured in AD. Why Crowd account lock policy isn't equal to AD policy? How can i see \& set it to corresponding values?? I can set password lockout attempts only for internal directory.


Answers:
author: Nic Brough -Adaptavist-
body: It's because Crowd cannot read the policy from your AD server. You have to give Crowd the rules because your AD server does not publish them.

comments: author: Admin Octavian
body: Hi Nic.

Thank you for answer, my next question is how to configure count of bad Password attempts for external directories in Crowd?

As i see, i can set this only for internal Crowd directory, external directory configuration doesn't have such option.


Tags: server
Unable to delete users from Crowd
Asked by Muraleetharan Ramaraj:

I have crowd admin access, but unable to delete users. It says

org.springframework.ldap.NoPermissionException: \[LDAP: error code 50 - 00000005: SecErr: DSID-031526E9, problem 4003 (INSUFF_ACCESS_RIGHTS), data 0 \]; nested exception is javax.naming.NoPermissionException: \[LDAP: error code 50 - 00000005: SecErr: DSID-031526E9, problem 4003.

Can you please help?


Answers:
author: Brant Schroeder
body: [@Muraleetharan Ramaraj](/t5/user/viewprofilepage/user-id/4266534)

Looks like crowd is using an LDAP directory. Even if you have it setup so you could manage users in crowd and it syncs back to LDAP you would need to ensure that the user performing the LDAP sync (delete/update) has access to do so in AD. I would suggest just making the change in AD and letting it sync to crowd.

comments: author: Muraleetharan Ramaraj
body: Thanks Brant for your answer
where do I get the username and password of crowd application?
Asked by xyz:

I was trying to Authenticate Crowd rest Api using python code [https://python-crowd.readthedocs.io/en/latest/](https://python-crowd.readthedocs.io/en/latest/?) where i can get

```
app_user = 'testapp'app_pass = 'testpass'
```

How can i find app_user and app_pass in my crowd.


Answers:
author: Nic Brough -Adaptavist-
body: They will be whatever you set up in Crowd for the application you are creating.

Crowd, like any secure system, does not store the password, it stores a hash to validate against. If you don't know what was set, you'll have to reset it.

See <https://confluence.atlassian.com/crowd/adding-an-application-18579591.html#AddinganApplication-add>


Tags: rest-api
JSM - Create a User in Active Directory via Request Type or Portal
Asked by Maurice Meyer:

Dear Atlassian Community,

I'm wondering, if there is a solution for HR projects in JSM to directly create/update a user in AD (active Directory) via the Portal or Ticket.

Does anyone have experience?

Thank you so much in advance!


Answers:
author: Prabhu Palanisamy _Onward_
body: HI [@Maurice Meyer](/t5/user/viewprofilepage/user-id/5332387) - [OnLink](https://marketplace.atlassian.com/apps/1231655/onlink-hr-systems-integration-for-jira?hosting=cloud&tab=overview) supports this use case. You can automate user provisioning, de-provisioning, change roles, assign licenses etc based on the details from the ticket.  
Here is a demo [video](https://www.youtube.com/watch?v=e2jOwE_8spM)that walks through the new user provisioning in Azure AD as part new hire onboarding. Happy to do a demo if this of interest to you.  

Disclosure: I'm part of Onward who built OnLink.

comments: author: Maurice Meyer
body: appreciate your suggestion Prabhu, I'm going to check it out. Thank you kind!


Tags: cloud

jira-service-management

jira-service-management-cloud
Automation to Create Issues on a Reoccurring Day
Asked by Amber Truesdell:

Goal: I want to create an automation that automatically creates a unique Jira Task issue for each of my direct reports on the last Monday of every month with a due date of the last business day of every month.

I have scoured the internet and this community and everything suggests I utilize the "When:Scheduled" trigger but when I go to add the next component of creating a new Jira issue, it is not an option.

To answer some potential questions:

Yes I have the permission level required to create Jira issues on this specific project

- Yes I have the permission level to create automations

I have tried utilizing the basic and advanced versions of the "When:Scheduled" trigger and neither allow me to make the next component a "Then: Create Issue"

I would like to refrain from downloading any external script/scheduler plugins from Atlassian Marketplace if I can avoid it.


Answers:
author: Manon Soubies-Camy
body: Hi [@Amber Truesdell](/t5/user/viewprofilepage/user-id/5591175) and welcome to Community!

Have you tried selecting "All actions":

![all-actions.png](https://community.atlassian.com/t5/image/serverpage/image-id/348179i974FC6294CFC09A0/image-size/large?v=v2&px=999 "all-actions.png")

And then selecting the project and type of the new issue:

![automation-create-issue.png](https://community.atlassian.com/t5/image/serverpage/image-id/348180i556513B338CAD7AB/image-size/large?v=v2&px=999 "automation-create-issue.png")

I believe Jira categorizes the "Create issue" action as incompatible with the "Scheduled" trigger because it doesn't know in which project to create the new issue nor which issue type to choose.

Hope this helps!

- Manon


Tags: cloud

jira-service-management

jira-service-management-cloud

jira-work-management
Who can see tickets when using Customer and organization profiles
Asked by Ingo Syllwasschy:

Hi,

we want to use customer and organization profiles. If I understand correctly, all customers of an organization can view all tickets of their organization? Is that correct?

Thanks

Ingo


Answers:
author: John Funk
body: Hi Ingo,

Yes, that is correct.

comments: author: Ingo Syllwasschy
body: Hi John,

thanks for your answer.

Is there anything, what I can do to change this? I know the ticket security. With this function should it function, or not?

I don't know why these concerns exist, but our customer management thinks that our customers don't want every customer to be able to see all tickets.


author: John Funk
body: Then you can implement Issue Level security to restrict visibility to those tickets.


author: Ingo Syllwasschy
body: Thanks for answer and Confirmation of my assumption.

Ingo


author: John Funk
body: You are welcome.


Tags: cloud

jira-service-management

jira-service-management-cloud
Cannot use "access_token" from my webhook response
Asked by Terry Dance:

My webhook successfully gets a token back, but I cannot use it any anything as Jira just fails to grab it. I've tried putting it into a variable, a comment or directly into the next webhook but its always blank.

My response is this;

### Response {#toc-hId--2124405624}

200OK  

##### Headers (6) {#toc-hId-1064171787}

Content-Type: application/vnd.appd.cntrl+json;v=1  
x-content-type-options: nosniff  
x-frame-options: SAMEORIGIN  
x-xss-protection: 1; mode=block  
Content-Length: 700  
Connection: keep-alive  

##### Payload {#toc-hId--743282676}

```
{  "access_token": "xxx",  "expires_in": 5}
```

To access the token I've tried

{{webResponse.body.access_token}}

{{webhookResponse.body.access_token}}

{{webResponse.body.substringBetween("access_token\\":", ",") }} - this works but leaves the " marks at beginning an end of the token, and trying to find the token between the 2 "'s doesnt work.

Anyone have an idea?


Answers:
author: Terry Dance
body: Managed to create a "smart" variable with this

{{webhookresponse.body.substringBetween("access_token\\": \\"", "\\",\\"expires") }}


author: marc -Collabello--Phase Locked-
body: Hi [@Terry Dance](/t5/user/viewprofilepage/user-id/5385711) ,

Probably you'd need to follow the steps at: <https://confluence.atlassian.com/jirakb/manually-formatting-webresponse-to-json-in-automation-1252006605.html>


Tags: automation

cloud

jira-service-management

jira-service-management-cloud

rest-api

smart-value

token

webhook
Customers do not receive the email when using the button "Reply to customer"
Asked by Anna Nguyen:

Hi Team,

Please help to check this case:

For notification emails, customers can receive all of them. But if our customer service agent reply to customers by the button "Reply to customer", then no email is sent out to customer. In specific,

- Outgoing email enabled

- Notification email enabled (this is not the issue about notification email)

Thanks

![reply to cust.png](/t5/image/serverpage/image-id/348118iED9DDEDF3C1DE327/image-size/large?v=v2&px=999 "reply to cust.png")


Answers:
author: Jack Brickey
body: Hi [@Anna Nguyen](/t5/user/viewprofilepage/user-id/5592979) , welcome to the community.

I have a few questions or things for you to check.

* can you verify that "comment added" notification is enabled under project settings \> customer notifications
* can you verify that the customer is the reporter?
* Can you verify that the comment that is made is actually viewable by the customer in the portal?

comments: author: Anna Nguyen
body: Thanks [@Jack Brickey](/t5/user/viewprofilepage/user-id/853369)

It's good now, the customers can receive the email from us


Tags: cloud

jira-service-management

jira-service-management-cloud
How to setup permitions for anyone to assets Objets schema
Asked by Kypta_ Jan_ Ing_:

Portal Request type is setup where Anyone can raise request. I use form in this request type where is used Field Type Assets Object/s

How to setup permitions for anyone to assets Objets schema?

Thank

Jan


Answers:
author: sathishkumar_selvaraj
body: ![image (18).png](https://community.atlassian.com/t5/image/serverpage/image-id/348112i1CD6891277B896C8/image-size/large?v=v2&px=999 "image (18).png")

comments: author: sathishkumar_selvaraj
body: <https://support.atlassian.com/jira-service-management-cloud/docs/building-an-object-schema-for-it-assets-management-itam/>

Refer to the above URL


author: Kumar_rajarapu
body: Hi [@Kypta_ Jan_ Ing_](/t5/user/viewprofilepage/user-id/5028533) ,

Please take a look at below doc link:

<https://help.refined.com/space/CLOUDDOCS/5175574529/Assets+fields+in+JSM+forms+and+requests>

Hope that helps.

Thanks


Tags: cloud

jira-service-management

jira-service-management-cloud