Confluence Using SCIM User And Group Provisioning For Azure AD
User Sync & Group Sync app provisions user and group information from Azure AD to Confluence. Users, groups and
directory details can by provisioned using SCIM and REST API. SCIM provisioning works based on events performed on
IDP.
This way the administrator only needs to manage user accounts in Azure AD.
This reduces the administration time required to create users and groups in Confluence modules such as Confluence.
You can refer the steps to configure Azure AD method with the Confluence SCIM from the video or documentation
given below
Download And Installation
Log into your atlassian instance as admin.
Navigate to the settings menu and Click Manage Apps.
Click on Find new apps .
Locate miniOrange User and Group Sync app.
Click Try free to begin a new trial or Buy now to purchase a license.
Enter your information and click Generate license when redirected to MyAtlassian.
Click Apply license.
Step 1: Get SCIM
Client Details
In the Configuration tab, please select Azure AD provider.
In the popup, please select SCIM method to perform user and group synchronization.
In SCIM configuration, Please enter App Name and click on Save Settings button. Copy the
SCIM Base URL and SCIM Bearer Token, these will be used later to configure SCIM application on
Azure AD.
Step 2: Setup Azure AD
SCIM Configurations
Log in to your Azure AD portal and select the Azure Active Directory.
Then create an Enterprise application.
Click on New Application and select non-gallery
application.
Give suitable name to your user provisioning application.
Click on Provisioning in left menu and click on Get started.
Select Automatic in Provisioning Mode and Enter
SCIM Base URL, SCIM Bearer
Token (which you will find in step 1) .
Assign users to your applicartion. Assigned users will be created in your
Atlassian module if they are not already present. You can also assign groups. Member of assigned groups will
be provisioned for Atlassian module.
Once done with configuration, Go back to application and click on Start
provisioning.
Step 3: User Sync Settings
Select the User Sync Settings tab from the left sidebar. Here you can configure different
settings about
user creation and updation.
You can select the directory, enable or disable user import, update process.
The user can be automatically enabled or disabled here based on IDP configuration.
You also have an option to set Default Project Lead and Default Component
Lead.
Step 4: Group Sync
Settings
Select the Group Sync Settings tab from the left sidebar. Here you can configure different
settings about
group creation and group mapping.
Here you can configure Default groups for new and all users.
You can set Manual Group Mapping or On-The Fly Group Mapping.
1. Manual Group Mapping -
Here you can manually map Confluence groups with the groups from IDP.
You can also configure to import IDP groups, filter groups and whether to keep existing users or not.
2. On-The Fly Group Mapping -
Here users will be assigned to groups in Confluence whose group name is the same as groups from IDP. If the
group doesn't exist in Confluence then it will be created.
You can configure to keep the existing user groups, filter groups and apply regular expressions on the
groups.
Step
5: Synchronization Process
To perform user sync, click on the Synchronize option of your newly created app.
When the synchronization is complete, you will be able to view newly created and updated user information in
Confluence's User Management section.
