_LDAP Auth Only Copy User

Copy User on First Login

This option affects what will happen when a user attempts to log in, if their username does not yet exist in the internal directory that is using LDAP for authentication. If this check box is ticked, the user will be created automatically in the internal directory when the user logs in. If this check box is not ticked, the user's login will fail.

If you tick this check box the following additional fields will appear on the screen, both described in more detail below:

• Default Group Memberships
• User Schema Settings

Default Group Memberships

This field appears if you tick the 'Copy User on First Login' check box. If you would like users to be automatically added to a group or groups, enter the group name(s) here. To specify more than one group, separate the group names with commas. Each time a user logs in, their group memberships will be checked. If the user does not belong to the specified group(s), their username will be added to the group(s). If a group does not yet exist, it will be added to the internal directory that is using LDAP for authentication.

Please note that there is no validation of the group names. If you mis-type the group name, authorisation failures will result – users will not be able to access the applications or functionality based on the intended group name.

Examples:

• confluence-users
• confluence-users,jira-users,jira-developers

Group memberships for users are copied from your LDAP server into JIRA when they authenticate. Groups will be created if they do not already exist in JIRA.

Note that once this option is enabled, a new menu will appear at the bottom labeled Group Schema Settings. You will need to expand this menu and fill out the appropriate fields.