Purpose

This How-To Guide has been written as a workaround for this bug:  CWD-5192 - Getting issue details... STATUS

This guide will instruct a Crowd administrator how to export users and groups from Azure Active Directory for the purpose of then importing this data into Atlassian's Crowd identity management software. Finally, it will allow users to logon without using Azure Active Directory for authentication, because the users will be definined locally in Crowd.

Solution

Export of Users & Groups from Azure Active Directory

1. Download this script: ExportOffice365UsersAndGroups.ps1
   1. Thanks to [Cleito|https://www.cleito.com/] for this script!

2. Open Microsoft Powershell as Admin

3. Execute in PowerShell: Install-module azuread

   1. You must select Yes to any additional modules that need to be installed

4. Execute the export script, downloaded in step one, in PowerShell: ./ExportOffice365UsersAndGroups.ps1
   1. You will be prompted for a username & password. You may use any Azure AD account, it does not have to be an administrative account.
5. After the script has finished running, verify the CSV files in your local path:
   1. users_file.csv
   2. group_memberships_file.csv

6. Please note that the passwords included in users_file.csv have been randomly generated by the script.

Import Users & Groups into Crowd

1. Log in to the Crowd Administration Console.

2. This step is an optional process to create a new Internal Crowd directory, with the intent to not create a mess in an existing directory.

   1. Click the 'Directories' link in the top navigation bar.

   2. Click 'Add Directory' link on the left bar.
   3. Click Next, Leave the default 'Internal' directory type selected
   4. Input a name of the new directory: 'ManualImportAzure'
   5. Click 'Continue'
   6. Click 'Update'

3. Click the 'Users' link in the top navigation bar. This will display the User Browser.

4. Click the 'Import Users' link. This will display the 'Import Type' screen. 

5. Click 'Next'

6. Click the 'CSV Importer' button. This will display the 'Configuration' tab of the 'CSV Importer'.

7. Select the appropriate target user directory where the import process will place the new users & groups.
8. Enter the details of the CSV files. For additional guidance: 'Configuring the CSV Importer'.
9. Click 'Continue'
10. Use the drop downs to map the fields in your CSV files to the Crowd user and group attributes: [Mapping CSV Fields to Crowd Fields|https://confluence.atlassian.com/crowd/mapping-csv-fields-to-crowd-fields-65437705.html]
11. Click 'Continue'
    

12. Confirm the configuration for your import

13. Click 'Continue'

14. The next screen shows the number of users & groups imported during the import process. If there are failures please consult the log files.

15. Please note that Crowd's CSV importer does not support nested groups. Therefore you will have to manually add groups as other groups' members when the import is over.
    

Allow Users to Login to Atlassian Applications using the new accounts, removing integration with Azure AD