Can Crowd map users from different directories?

[Andreas Haaken]

User Story:

We have an internal Confluence instance and one for external customers. We have two directories in crowd to seperate the people views. There are some employees working on both instances, having one account in each directory.

Is there a way to tell crowd, that 2 identities from different dirs are one identity?

background: we cannot take only one directory, as confluence makes everybody visible in the interal peoples directory. But the external customers shall only see their consultants, but not the developers.

[Bruna Griebeler · Accepted solution]

Hi Andreas

"Is there a way to tell crowd, that 2 identities from different dirs are one identity?"

I believe each user must be in one directory. However in the Application you can have more then one directory.

So in your case, you could have 3 directories: A Directory A with the users who want to access Application A, A Directory B with the users who want to access Application B, and another Directory C with the users who can access both Aplications.

Just a suggestion.

Hope it helps!

[Andreas Haaken]

Well, after some thinking, that might help.

Or Situation is somewhat more complicated, and the story is just a brekdown of the problem, but your suggestion can help.

We have some accounts from customer A ->Dir A

We have some accounts from customer B->Dir B

And we have the Support Teams, that work in bot Apps ->Dir S

So our Confluence fopr Customer A has both dirs: A+S

Customer B has B+S

And Jira as Heart of all has A+B+S

Sounds like a solution ;)

[Brendan Patterson]

We have a complex scheme to achieve this.

It involves exposing users from the LDAP system to different Crowd directories. The Crowd directories leverage "User Object Filters" to acheive this meta-user-allocation and separation.

So there IS this way but it took some work.

Also read up on 'delegated authentication' to see if that helps get you towards your goal. I think it might come up short but is worth looking through -

https://confluence.atlassian.com/display/CROWD/Configuring+a+Delegated+Authentication+Directory

Good luck!

Brendan