Copy user directory

Owned by Mari Fuglem
Last updated: Nov 20, 2023 by Steinar Line
3 min read

This function allows you to copy users, groups and group memberships between user directories.

When to use

  • The function can be used in many migration situations where you need users and their group memberships to be avaliable in another user directory than earlier. For instance it can be used when phasing out using active directory and introducing Just-in-time provisioning to internal directory, or when phasing out just-in-time provisioning and introducing cloud user synchronization from SCIM.

  • The function can copy users in both active and inactive directories.This way the users can be copied first, and then when ready, the new user directory can be promoted with all the users ready to go.

Copy from one user directory to another

  • Passwords are not copied. We recommend that you set the “to directory” below the from directory in the user directory list before starting. Since passwords are not copied, users may otherwise not be able to log in using passwords.

  • The logged in username “admin” will not be copied to avoid potential password lockout.

  • If nested groups has been enabled in the User directory setup, all groups will be "flattened" and added to the user as Jira, Confluence, Bamboo, Bitbucket and Crucible does not support nested groups.

  • You are also allowed to copy users to an Active Directory directory as long as it is configured as read/write (this is supported by Jira and Confluence). Usernames are then copied into the sAMAccountName field in AD.
    NB! Be aware of that AD only supports usernames with a maximum length of 20 characters. Users with usernames longer than 20 characters will not be copied.

Do not copy users

If users already exist in 'to user directory' you can activate the switch “Do not copy users”.

  • Users will not be copied

  • Groups that do not already exist are copied

  • Existing users are assigned group memberships

Log output - copy operation

A summary of the copy operation is displayed when copying is complete.

Remove users in ‘to user directory’

We have added a function to remove users in ‘to user directory’. This function is initially hidden.
Add ?showRemoveUsers=true to the URL and a button “Remove users in ‘to user directory’ becomes visible at the bottom of the page.

Example URL:

https://jira-test.example.com/plugins/servlet/no.kantega.kerberosauth.kerberosauth-plugin/copyDirectory?showRemoveUsers=true

Log output - Remove users in ‘to user directory’

A summary of users removed is displayed when removal is complete.