youngmon/atlassian-qna huggingface dataset:
Crowd - resetting passwords for users in multiple directories
Asked by BillW:

Hi,

We have several Confluence and JIRA instances. Some are open to our customers and all of our employees. Some open to all of our employees. Some are restricted to only a small handful of our employees.

In Crowd, we have separate user directories (Customers, Employees, Restricted), with one Confluence app connected to Customers and Employees, another connected to just Employees, and another to just Restricted.

Obviously, the Restricted directory has some of the same users that are in the Employees directory.

I'm struggling which approach to use so that any user (employee or customer) can reset their password in a connected app, especially since there is an "overlap" of users between the Employees and Restricted directories.

Option 1 - Is it best to give each application read/write permission to the directories so that the user changes their password from the Crowd-connected app?

Option 2 - Or is it best to give each application read-only permission to the directories and give users "user access" to Crowd (per <https://confluence.atlassian.com/crowd/granting-crowd-user-rights-to-a-user-152045076.html>) so that they can go (only) to Crowd to change their password?

I believe a deficiency of Option 2 is that Crowd only resets the password in the directory first connected to the "crowd" application in Crowd... so a user in multiple directories wouldn't be able to reset ALL of their passwords.

Thanks in advance!

Bill


Answers:
author: AnnWorley
body: Thanks for posting this question! I am tempted to move it to the Discussion section of the forum, as it is a great talking point.

To me it seems like a better experience for the user to change the password in the application where they use the password, rather than having to go to another URL altogether. So I like option 1.

comments: author: BillW
body: I tend to agree, but if the password is changed in Crowd, does it have to be via CrowdID to ensure that the user's password is updated in ALL directories in which they are a member?


Tags: crowd-administration

user-management
Crowd/AD LAN/DMZ
Asked by Sygnity S_A_:

Hello all

I have question about architecture o CI/CD proces using JIRA Servicedesk, JIRA Software, Bitbucket, Bamboo and Crowd for managing users.

Because our Servidesk is shared at internet we have JIRA SD and SW in DMZ and Bitbucket, Bamboo, Crowd in LAN - all these are separated vLans, where traffic should be close for all to LAN without AD to Crowd connection.

If You have better ideas for architecture please write. What is best architecture for that in You opinion :)

Thanks in advance

Maciej


Answers:
author: AnnWorley
body: The setup you describe makes sense, putting the public-facing Jira applications in the DMZ so that they can be accessed on the Internet and the rest of the applications on the internal LAN since only internal users access them.

Do you have a way to open a port from the LAN to the DMZ for the option of connecting the applications with application links or in case you want to use Crowd for User Management of Jira?

comments: author: Sygnity S_A_
body: Hello Ann,

Management users is via Crowd witch is in the separated vLAN (Bamboo, Bitbucket and Crowd) the second vLAN (DMZ) is for JIRA and Confluence.

Problem is how to CI/CD proces should be setup where we need automatic deployment to LAN (ports are not open)
Jira<>Crowd application link fails with XSRF Security Token Missing
Asked by Thomas Krause:

Hello!

Just installed a fresh crowd 3.0.1 with jira 7.5. Authentication works like a charm, but i want to link the applications for convinience.

The link creation in jira for crowd works and redirects me to crowd-administration. When i insert the link there i come to a page with following Message:

```
XSRF Security Token Missing

We could not complete this action due to a missing form token.

You may have cleared your browser cookies, which could have resulted in the expiry of your current form token. A new form token has been reissued.
```

When i click on retry:

"HTTP Status 405 - HTTP method POST is not supported by this URL"

Where can i start to debug this issue?

Greetings from Germany

Thomas


Answers:
author: william@perasotech.com
body: Hello

Did you ever get a way to get around this problem?


author: Thomas Krause
body: Intresting log "error". Have the same entry in my installation.

<https://jira.atlassian.com/browse/CWD-4678>

There is an intresting entry in the activity roll of this issue on 7th dec 2016 "remote link". :)


author: Lars Olav Velle
body: Have you looked at this page?

<https://confluence.atlassian.com/stashkb/xsrf-security-token-missing-529661980.html>

-Lars

comments: author: Thomas Krause
body: Hi Lars!

Thank you for your reply! The solutions on this site i already tried :( None of them fits to my enviroment or are applicable to crowd :(

Thomas


author: Lars Olav Velle
body: Hmm.. Application link?

How are you trying to link them?

-Lars


author: Thomas Krause
body: in JIRA go to first administration tab "applications"

go to "integrations" -\> "application links"

there i try to add crowd url. first step is successful, but the same step onto "remote site" fails


Tags: application-link

jira
Selective Sync with Azure Active Directory
Asked by frederikfix:

I'm using the Azure AD integration that was added in 3.0 and which works great.

However my AD contains more users than I want to give access to JIRA for. This gives me two problems:  
1. The user dropdowns are more cluttered than they need to be  
2. I am pushed into a higher user tier than necessary.

Is there a way to only sync a sub-part of my Azure AD to crowd?


Answers:
author: Bruno Vincent
body: Hi Frederik,

Regarding problem #2, only users who can log into your applications will be taken into account (in other words, only the users who are set as allowed to authenticate in Crowd). More details are available on Atlassian's documentation: <https://confluence.atlassian.com/crowdkb/how-are-crowd-users-counted-towards-the-application-user-limit-246481311.html>

Regarding problem #1, you might want to take a look at the ODCC add-on (Office 365 Directory Connector for Crowd) which has filtering options and allows you to retrieve only users belonging to specific groups: <https://marketplace.atlassian.com/plugins/com.cleito.odcc/server/overview>

(Disclaimer: I work for the vendor of the ODCC add-on).

Hope this helps!

Bruno

comments: author: frederikfix
body: Thanks a lot!

Regarding the ODCC add-on: Are planning on continuing development now that a part of the functionality is in the core?


author: Bruno Vincent
body: You're welcome [@frederikfix](/t5/user/viewprofilepage/user-id/1146297).

Well, that's a very good question. Since we have unique features (e.g. filtering options, short username, support for guest users, support for users with Azure AD Multi-Factor Authentication enabled), we are definitely maintaining the ODCC plugin and continuing its development.
Is Crowd synchronising with ActiveDirectory if it says, that License is invalid
Asked by Oliver Kuhn:

Crowd was saying that we have to much users and we need another license.

We now reduced the users in the AD-Group. Will crowd synchronise the new state, so that we can use our old license again?


Answers:
author: AnnWorley
body: When Crowd synchronizes with Active Directory it should pick up the changed group membership. If the AD group is being used to allow access to Crowd, that will reduce the number of users counting against the license. Here is an article with more details about the way the licensing works with external directories: [How are Crowd Users Counted Towards the Application User Limit?](https://confluence.atlassian.com/crowdkb/how-are-crowd-users-counted-towards-the-application-user-limit-246481311.html)
Crowd 2.11.1 - Apache Struts2 REST XStream Vulnerability
Asked by Balaji Neyveli:

Hi,

Can you please verify if Crowd 2.11.1 version is affected by the Apache Struts2 REST XStream Vulnerability (CVE-2017-9805) ?

The REST plugin seems to be integrated into Crowd since 2.0.

Is Crowd using the REST plugin with XML?

If so will there be a patch for it?

Thanks,


Answers:
author: Boris Berenberg - Atlas Authority
body: Looks like nope: <https://twitter.com/JIRA/status/905486179901906944>


author: Balaji Neyveli
body: Thanks for the reply. It is great that Atlassian is so fast to respond to these issues. Helps us a lot.
CVE-2017-9805, Is there a fix/patch available?
Asked by John_Sewchand:

A struts-2 security alert has been raised, CVE-2017-9805. I've noticed that the version of Crowd that we are using, 2.11.1, has the affected struts libraries within the installation. Do the newer versions use later, unaffected versions of struts-2 and if not, is there a patch available? If none is available is there an eta for a version that is not affected?

Much appreciated


Answers:
author: Marcin Kempa
body: Hi [@John_Sewchand](/t5/user/viewprofilepage/user-id/513236),

The CVE-2017-9805 is not in struts core, but in the rest plugin, which is not used in Crowd (also not in 2.11.1). Therefore Crowd is not affected by this vulnerability.

Please see the <https://jira.atlassian.com/browse/CWD-4971> and<https://twitter.com/JIRA/status/905486179901906944> for further information.

Best Regards,

Marcin Kempa

comments: author: John_Sewchand
body: Thanks for the quick reply!
Crowd - Unlock or Active the users after 15 mins automatically
Asked by Umesh Kanaujia:

Application

Three unsuccessful login attempt for a user lock the account.

Requirement

Automatically the account become active for a user afer 15 mins.

Question

Can you please advise is there any propery available in Crowd or any Rest API exposed by crowd to perform this task or any other alternative solution?

Thanks,

Umesh Kanaujia


Answers:
author: somethingblue
body: Hi Umesh,

I checked and did not see this currently being available as a feature. In light of that I created [CWD-4973](https://jira.atlassian.com/browse/CWD-4973).

Please vote on this ticket and you'll be notified of any updates to the ticket including fix versions.

Cheers,

Branden


Tags: confluence

jira
How to stop Jira Service Desk Customers being counted in Crowd licencing limits
Asked by Cameron Leask:

We use Crowd (licensed for 50 users) with various Atlassian applications including Jira Service Desk (5 agents).

Crowd is complaining that we have reached our user limit despite online having less than 20 Jira users etc. I believe that the problem is that our service desk customer users (which should not be included in any licensing limits) are counting towards our user limit in Crowd.

I am aware of <https://jira.atlassian.com/browse/JSD-1244> - although nothing seems to be happening on it.

I'd be grateful for any suggestions on this, it seems ridiculous that Service Desk's licencing model can be "overruled" in this way by Crowd.


Answers:
author: somethingblue
body: Hi Cameron,

I did see your comment and I will be interested to see the response, however, I don't see it assigned to an Engineer yet so I would add the use case per the instructions on [JSD-1244]( https://jira.atlassian.com/browse/JSD-1244) and you'll be notified when this is resolved and an Engineer has been assigned to it.

I would also take a look at [Service Desk Customers will count towards jira-users license if "Default Group Memberships" is configured](https://confluence.atlassian.com/jirakb/service-desk-customers-will-count-towards-jira-users-license-if-default-group-memberships-is-configured-777027054.html):
> In Service Desk 2.0 and above with public signup, Customers are added into the certain groups and count towards JIRA license. As a result, Service Desk Customers are able to login JIRA and perform actions based on the permission given to the configured groups.
>
> This is an expected behaviour as **Default Group Membership**option is enabled for JIRA to LDAP or Crowd, thus new users will be automatically added into the configured group(s), usually jira-users so they can login.
>
> To workaround this disable **Default Group Membership**in LDAP or Crowd.

Hopefully this helps.

Cheers,

Branden


Tags: crowd-administration

jira-service-desk
Migrating Knowledge Base from Freshworks to Jira
Asked by Sam Ben-David:

Hey everyone :)

We're looking into moving our Knowledge Base from Freshworks to Jira and wondering what options we have.

Has anyone migrated their KB from one platform to Jira? Either to Jira Service Management or Confluence?

In Freshworks we can export all articles to one XML or JSON file.


Answers:
author: Dan Breyen
body: Hi Sam, I found this [community article](https://community.atlassian.com/t5/Jira-Service-Management/Migration-from-Freshworks-to-Jira/qaq-p/2742947) that you may find useful. JSM uses Confluence for its Knowledge Base, so it's basically the same conversion.

It looks like it's doable.

Hope that helps.


author: k_butkovska
body: Hi [@Sam Ben-David](/t5/user/viewprofilepage/user-id/5483101),

<br />

The Help Desk Migration service might be helpful if you're considering migrating your Freshworks data.

You can find migration apps for both [Freshdesk](https://marketplace.atlassian.com/apps/1218501/freshdesk-to-jira-service-management?tab=overview&hosting=cloud) and [Freshservice](https://marketplace.atlassian.com/apps/1218843/freshservice-to-jira-service-management?tab=overview&hosting=cloud) on the Atlassian marketplace.

Export up to 20 articles at no cost. For additional exports, a fee will apply.

Run a free Demo Migration to make sure it meets your requirements.


Tags: cloud

jira-service-management

jira-service-management-cloud

knowledge-base
Can you reorder Request Types?
Asked by Ron Moses:

It appears Request Types are listed alphabetical on the screen. I would like to be able to reorder the request types so the most important/most used request type is on top. I could not locate a way to do this in the documentation but am hoping someone can share how it can be done.


Answers:
author: Susan Waldrip
body: Hi [@Ron Moses](/t5/user/viewprofilepage/user-id/5569119) , welcome to the Community!

When you create your Request Types and view them in the Project settings \> Request types list, they probably won't be in order you want and you can't seem to reorder them on this screen (which is a little odd, but...). However, you \*can\* reorder them in the Project settings \> Portal settings \> Portal groups tab. On that tab, if you click the down arrow on one of your groups, you can drag them into the order you want using the double three-dot icons on the left of each request type:

![request type reordering.jpg](https://community.atlassian.com/t5/image/serverpage/image-id/341982iC6928BA54C903423/image-size/large?v=v2&px=999 "request type reordering.jpg")

This is true for Company-managed projects, not sure if it's the same for Team-managed projects.

comments: author: Ron Moses
body: Thank you for the help, that worked great!


author: Susan Waldrip
body: You're welcome, I'm glad you've joined the Community! ??


author: Victor Law
body: Hi [@Ron Moses](/t5/user/viewprofilepage/user-id/5569119)

Welcome to the community.

It is possible to sort/change the order of the Request Types under the **Portal settings** page:

Project settings \> Portal settings \> Portal groups

![Screenshot 2024-08-15 at 10.00.04?PM.png](https://community.atlassian.com/t5/image/serverpage/image-id/341979i9899C0CD4A036D8E/image-size/large?v=v2&px=999 "Screenshot 2024-08-15 at 10.00.04?PM.png")

Thank you.

comments: author: Ron Moses
body: Thanks for the help!


Tags: cloud

jira-service-management

jira-service-management-cloud
How can I allow for a user field on ITSM portal to return all users
Asked by Chris Barlow:

We have a change management form with the ability to request AWS permissions for X users when making the change ticket to be provisioned automatically during deployment.

I have a user-search field on the issue type and present on the portal and would like the "customers" when creating a ticket (they are all internal customers) to be able to search for users we have in the Jira platform.

I have followed what I can see here <https://confluence.atlassian.com/proforma/proforma-user-lookup-fields-1087521349.html> and have granted permissions of the ITSM for All Logged In Users to Browse Project but this didn't seem to work as I hoped.


Answers:
author: Marc - Devoteam
body: Hi [@Chris Barlow](/t5/user/viewprofilepage/user-id/5401803)

Check this KB article, <https://confluence.atlassian.com/cloudkb/user-picker-fields-are-not-displaying-other-users-in-the-customer-portal-965544660.html>


author: Adolfo Casari
body: [@Chris Barlow](/t5/user/viewprofilepage/user-id/5401803)you have to add your Jira users as customers in the project, usually through a group.


author: Dave Mathijs
body: Hi [@Chris Barlow](/t5/user/viewprofilepage/user-id/5401803) welcome to the Atlassian Community!

Have all of your customers been granted the **Browse users and groups** global permission?

comments: author: Chris Barlow
body: I had not, but I have now and that still did not work.


Tags: cloud

jira-service-management

jira-service-management-cloud
Issue Types
Asked by neil_waterhouse:

In one project, I can select the project, navigate to the left hand side and select "Project Settings" then navigate to Issue Types. This leads me to a screen whether I can select what description fields there is, Context fields and add / create a field. However, when I select a different project it does not do the same thing.   

Select different project, navigate to the left hand side and select "Project Settings". Instead of having a general issues types option, it has types/layout/fields all separately listed and not one of these leads me to the screen I am expecting to see.   

Any ideas why? I assume it is because how the project was set up however Jira is not clear enough for me to clarify this and what I should be doing differnetly.


Answers:
author: Marc - Devoteam
body: Hi [@neil_waterhouse](/t5/user/viewprofilepage/user-id/5462464)

It seems the 1st project you created was of the type company managed, and the 2nd one looks like a team managed project.

Team managed projects don't have, the options types/layouts/etc..

[Basics of team and company managed projects](https://support.atlassian.com/jira-software-cloud/docs/learn-the-basics-of-team-managed-projects/)


author: Jack Brickey
body: Hi [@neil_waterhouse](/t5/user/viewprofilepage/user-id/5462464) , welcome to the community.

This would mean that you are a project admin in the first project, but not in other projects.

comments: author: neil_waterhouse
body: Hi Jack, thanks for this, it makes sense however the second project was created by me suggesting that I am admin..?


Tags: jira-service-desk-cloud

jira-service-management

jira-service-management-cloud
What are the implications of downgrading from JSM Premium to Standard?
Asked by Lea Columna:

What are the consequences of downgrading from JSM Premium to Standard? Beyond the loss of specific features, will this action result in the deletion of customer data, such as assets?


Answers:
author: Fernando Eug?nio da Silva
body: [@Lea Columna](/t5/user/viewprofilepage/user-id/5319514) , Welcome to the Atlassian Community!

Jira Service Management Premium offers some additional features compared to Standard, here are some of the most famous ones:

- Assets: Assets is an exclusive feature for Jira Service Management Premium or Enterprise, the Standard version does not contain this module

- Atlassian Intelligence and Virtual Agent: Atlassian is working hard on Artificial Intelligence and how to improve the user and operations experience, these have been valuable features that are not present in the Standard version

- Automations: When you are using Premium, the number of automations in your environment is increased

Please take a look here to see more details about what each plan offers: [Explore Jira Service Management Pricing Plans (atlassian.com)](https://www.atlassian.com/software/jira/service-management/pricing)

comments: author: Lea Columna
body: Thanks for your swift answer, [@Fernando Eug?nio da Silva](/t5/user/viewprofilepage/user-id/4606715) !

Would you know if they will lose their data if they downgrade? Can they recover the data if they decide to upgrade again?


author: Fernando Eug?nio da Silva
body: [@Lea Columna](/t5/user/viewprofilepage/user-id/5319514)

As long as you don't delete anything from the structure that is part of this feature and only apply the downgrade, the data shouldn't be lost. It will be inaccessible, of course, but if you switch back to the Premium plan in the future, it will still be there.


Tags: cloud

jira-service-management

jira-service-management-cloud
Is it possible to bulk upload web links through a csv file import?
Asked by Spasimira Genova:

Hi community,

We are revamping a critical project in our Jira instance in relation to audit processes and compliant with regulations. For this we need to bulk upload a huge vendor list as issues and each issue should also have a google forms and google sheet link attached to it. These would be the same for each issue.

Is it possible to achieve this using the bulk import option?

Many thanks


Answers:
author: Adolfo Casari
body: [@Spasimira Genova](/t5/user/viewprofilepage/user-id/5468025)Yes, use CSV, see:

<https://support.atlassian.com/jira-cloud-administration/docs/import-data-from-a-csv-file/>

For the links create customfields (text)

comments: author: Spasimira Genova
body: [@Adolfo Casari](/t5/user/viewprofilepage/user-id/853257) I've gone through these instructions but I still don't see how I can achieve the described above. I'm trying to figure out whether the CSV can also import web links through the option shown in the screenshot below.

![Screenshot 2024-08-16 at 10.48.32.png](https://community.atlassian.com/t5/image/serverpage/image-id/342094iB6E52473F21AD01C/image-size/large?v=v2&px=999 "Screenshot 2024-08-16 at 10.48.32.png")


Tags: cloud

jira-cloud

jira-cloud-administration

jira-service-management

jira-service-management-cloud
eMail Notifications
Asked by Myles Boyd:

I am new to JSM and my first project is migrating one of our internal departments.

Setting up email notification for when an issue is created, the only variable I can see for the name of the recipient is ${recipient.name}.

How do I do just the first name?

Saying Hi Poe Dameron is not really the customer service touch.


Answers:
author: John Funk
body: Hi Myles,

You can try:

{{issue.reporter.displayName.split(" ").first}}

comments: author: Myles Boyd
body: Spot on thank you.


Tags: cloud

jira-service-management

jira-service-management-cloud