How to automatically create AD group from Jira

[serge calderara]

Dear all,

We are looking on a way to be able to cover a request which is as bellow:

When a user request access to a particular application from Service Desk, we need to add manually that user to an AD group, this is teh today situation that we repeat for 500 user request /month.

We are looking for a solution to make this Ad group creation or user adding to group to be fully automatic from jira

Does anyone know a plugin who can do this ?

regards

[Derek Fields (RightStar) · Accepted solution]

I am not aware of any plugin that will do this for you (which doesn't mean that there isn't)

Is this an on-premise AD or Azure AD? Either way, you could use ScriptRunner in a post-function transition to update the directory. If it is a local AD, I would create a PowerShell script and use ScriptRunner to call that script with the user and group information. If it is Azure AD, you can create a REST call in the post-function to add the user to the group.

[serge calderara]

@Derek Fields (RightStar) , this is AZURE AD Identity Governance,

Do you have sample of solution you mentionned ? never done it

regards

serge

[Derek Fields (RightStar)]

I haven't done it either, but it looks pretty straightforward. There is a REST API documented here.  It is a PUT to /groups/{gid}/users/{uid} where you supply the Group ID and the User ID. You can use the HttpURLConnection class to create the connection and execute the PUT statement.