Jira:Users:Directories

Directory Precedence

Users are authenticated by the first directory that their name appears-in.

• Create a user in the local directory who's name duplicates a user in an LDAP/Active Directory to barge-in on existing accounts without external tools like Script-Runner.
• Jira with Crowd can be configured to "aggregate groups" to allow for group management without sharing LDAP write permissions.

Have a Jira-internal admin user

If the LDAP connector fails for whatever-reason having an internal user will allow an admin to log-in to a running instance to make repairs.

Restrict Volume of Synced Active Directory Users

Filter-out Active Directory users with a pwdLastSet value of '0'; they won't be able to log-in, anyway.

Create a duplicate LDAP directory

Create a duplicate user directory in a disabled state. You can't alter a directory you're logged-in through.