How to use AD to authenticate "public" JSD users

[David Sokolowski]

We are trying to use both JSD to allow internal customers to create tickets without having to manually login first, as well as using AD to authenticate users. 

Here is the use case:

• Using JSD for internal customers to log tickets via email without having to create an account first
• Using AD for authentication on users who have logged in to create accounts

So now we have a number of users with two accounts: the first they created automatically when they submitted a ticket and JIRA created a "public login customer" account in the local directory that doesn't use a license; the second if/when they login to JIRA proper, which pulls their AD credentials and creates a new account for them. Voila! Two accounts.

What is the best method to use JSD for "public access" while allowing AD to authenticate users when they're created? 

[Dastin_Kuwałek__SoftwarePlant_]

Are you using Delegated authentication directory?

I assume that AD knows all users that can create ticket in your Service Desk.

1.If my thesis is true then you could use AD Connector which will proactively synchronize all users to JIRA and will be used for authentication.

2. Next step would be limiting your SD project's permissions to restrict creating tickets to people with existing JIRA account.

Which would eliminate duplicates.