Can I change the directory for an individual user

[Audra Bonacki]

Hi, I have a user account that I need to change the directory for. Can I do that for one user or do I have to delete their account and start over?

[Mikael Sandberg]

Does the user exist in both user directories? Is the username the same? Do all your other users only exist in one of the directories? The way a user is authenticated is based on the order of your directories, it is read top to bottom until the user is found.

[Audra Bonacki]

Hi Mikael, how do I check if a user is in both directories? I'm not sure if they are. Yes the user name is the same, yes the other users are all in the same directory and I have that directory listed as the first one.

[Mikael Sandberg]

The only way to check it is to access the directory directly since Jira will only the first directory it finds the user in. 

So are you trying to move the user in question from the first user directory to the second one? What user directories are you using? AD/LDAP and Jira internal?

[Audra Bonacki]

Our first directory pulls from AD and the user is active in there. They were previously able to log in and now 2 weeks later, can't. The primary is the Jira DeligatedAuthentication Directory, the second one listed is Jira internal. This user is in Jira Internal. Hope that makes sense.

[Mikael Sandberg]

If you look at the user under User Management, is it being pulled in from AD or Jira internal? Look at the directory column. If it is being pulled in by the AD you could switch the order of your user directories, as long as your other users do not exist in both.

But I would look into why the user cannot authenticate against the AD first. Are you using AD groups to give access to Jira or internal groups? 

[Audra Bonacki]

Microsoft AD and I confirmed they have an active AD account set up.

[Mikael Sandberg]

Check that the user belongs to the group that gives them access to Jira. 

You could move the internal directory up and see if the user can log in with that account, just as long as none of your other users exist in the internal with the same usernames and in AD.