What happens when users are disabled/removed from active directory?

[Jason Plumhoff]

I'm currently setting up our on-premise instance of Confluence and I had a question about user management. I've set up our system to use Microsoft Active Directory (Read Only, with local groups). I've verified I can import users and groups. Assuming I go ahead and import our users and they start creating content, what happens when our IT group decides to remove or disable a user? Will that user still count against my license?

[Andy Brook [Plugin People] · Accepted solution]

I had that configuration in my last role. Initially I included the users account status in the LDAP filter, such that they were discounted. This resulted in the users wherever listed, being coloured 'red' (no hyper link) and user spaces were inaccessible. As a result of this, users complained wanting access to those users data, so I undid the change. Then, I had an unlimited license so didn't care about the membership, now, yes, it would count as a seat.

Potentially a housekeeping job could be written to scan all registered users, then poll LDAP to figure out if they exist or are disabled, removing confluence-users membership as a result.

[Stephan Haslinger]

Potentially a housekeeping job could be written to scan all registered users, then poll LDAP to figure out if they exist or are disabled, removing confluence-users membership as a result.

There is a CROWD Improvement request that may be related: https://jira.atlassian.com/browse/CWD-2478

[JamieA]

related question: https://answers.atlassian.com/questions/12956/jira-full-ldap-integration-how-do-you-deal-with-retiring-users