User Sync & Group Sync app syncs user and group information from Oracle Identity Cloud Service (IDCS) to Jira,
Confluence and Bitbucket. Users, groups and directory details can by synced user group attributes. Sync can be
performed manually, scheduled to run after set time intervals, or during user login.
This way the administrator only needs to manage user accounts in Oracle Identity Cloud Service (IDCS). This reduces
the administration time required to create users and groups in Atlassian modules such as Jira, Confluence, and
Bitbucket.
Download And Installation
- Log into your atlassian instance as admin.
- Navigate to the settings menu and Click Manage Apps.
- Click on Find new apps .
- Locate miniOrange User and Group Sync app.
- Click Try free to begin a new trial or Buy now to purchase a license.
- Enter your information and click Generate license when redirected to MyAtlassian.
- Click Apply license.
Step 1: Setup Oracle Identity Cloud Service (IDCS)
- Access the Oracle Identity Cloud Service administration console, select Applications, and then click
Add.
- Click on Confidential Application.
- Enter the name of your Application and select Display in My Apps option under Display Settings
section. And then click on the Next button.
- Enable Configure this application as a Oauth Client now. Select Client Credentials and
Refresh Token as your Allowed Grant type.
- In the Redirect URL enter the Callback URL from the plugin. Eg: <server-base-url>/plugins/servlet/usersync/callback.
Replace <server-base-url> with your Atlassian module Server BaseURL.
- You can select Scope as per your requirement and under Grant the client access to Identity Cloud
Service Admin APIs section, add App Role according to your requirement. And click on Next
button.
- Under Expose APIs to Other Applications section, enable skip for later option and click on the
Next button.
- Under Web Tier Policy section, enable skip for later option and click on the Next
button.
- Enable Enforce Grants as Authorization checkbox, if you want only users to the access application
which you granted acccess to it and click on the Finish button.
- Assign the users/groups to your application by clicking on the Users / Groups tab respectively.
- Activate the application, once it gets created.
Step 2:
Setup User Sync & Group Sync app
- Open User Provisioning/Sync for Jira plugin configuration. Go to the Configuration tab.
Select Oracle from
the options.
- Fill in values according to the table below.
| App Name |
Enter unique name which you can identify in applist after configuration. |
| Client Id |
Enter Oracle Cloud Client ID which you will find in Credentials in the
left panel. |
| Client Secret |
Enter Oracle Cloud Client secret which you will find in Credentials in
the left panel. |
| Oracle Base URL |
Enter the base url for your oracle domain. |
| Oracle App ID |
Enter the app id of the app you created inside Oracle. |
| Optional IDP attribute for Group membership assignment |
If you wish to include additional attributes in the API call for group membership assignment, please enter them here. |
| Set Scheduler Time Interval |
To synchronize user and group information, choose the scheduler time interval. |
- Click on Save Settings.
Step 3: User Sync Settings
- Select the User Sync Settings tab from the left sidebar. Here you can configure different
settings about
user creation and updation.
- You can select the directory or can create a new one. Furthermore, you can choose from the following operations for provisioning users.
- You also have an option to set Default Project Lead and Default Component
Lead.
Step 4: Group Sync
Settings
- Select the Group Sync Settings tab from the left sidebar. Here you can configure different
settings about
group creation and group mapping.
- Here you can configure Default groups for new and all users.
- You can set Manual Group Mapping or On-The Fly Group Mapping.
1. Manual Group Mapping -
- Here you can manually map Jira groups with the groups from IDP.
- You can also configure to import IDP groups, filter groups and whether to keep existing users or not.
2. On-The Fly Group Mapping -
- Here users will be assigned to groups in Jira whose group name is the same as groups from IDP. If the
group doesn't exist in Jira then it will be created.
- You can configure to keep the existing user groups, filter groups and apply regular expressions on the
groups.
Step
5: Synchronization Process
- To perform user sync, click on the Synchronize option of your newly created app.
- When the synchronization is complete, you will be able to view newly created and updated user information in
Jira's User Management section.
6: Multiple IDPs
Settings
- The plugin allows for configuring SCIM provisioning on your Jira to accommodate your specific use case. To add another IDP, simply navigate to the "Configured IDPs" section. Select on Add new App to configure multiple provisioning connections.
