User accounts from Multiple Active Directory Domains

[Brent Kiley]

We currently have Jira configured to pull user accounts from one of our Active Directory subdomains where the majority of the users that need access are (at the time all the users were there). Our domain structure is domain.local and then sub1.domain.local (this is where jira is currently pointed) as well as sub2.domain.local.

We now have a requirement to give users access to Jira who are in sub2.domain.local.

I know we can add another directory to the jira user config, but then we would be risking duplicates if ever the domains had the same username.

We currently use the directory type JIRA Delegated Authentication Directory. I believe there is a newer AD integration but no way for us to migrate to it and I don't believe it solves our issue.

Is there any way to add the other domains? Is crowd the only way? Or would crowd even work in this case?

Thank you

[Bruna Griebeler]

Hi!

I believe you should create another User Directory for sub2.domain.local, but first check in your LDAP how many duplicate users and groups do you have there.

If you have just a few duplicated, you can create a filter in your LDAP connection, to set a few users that you don't want to be imported, and so, avoid the duplicated users.

Hope it helps!

[Petra Goldstein]

That's the best solution?