How to ensure an AD change to the userPrincipalName Attribute is reflected properly in Confluence
プラットフォームについて: Server および Data Center のみ。この記事は、Server および Data Center プラットフォームのアトラシアン製品にのみ適用されます。
Support for Server* products ended on February 15th 2024. If you are running a Server product, you can visit the Atlassian Server end of support announcement to review your migration options.
*Fisheye および Crucible は除く
プラットフォームについて: Data Center のみ - この記事は、Data Center プラットフォームのアトラシアン製品にのみ適用されます。
この KB は Data Center バージョンの製品用に作成されています。Data Center 固有ではない機能の Data Center KB は、製品のサーバー バージョンでも動作する可能性はありますが、テストは行われていません。サーバー*製品のサポートは 2024 年 2 月 15 日に終了しました。サーバー製品を利用している場合は、アトラシアンのサーバー製品のサポート終了のお知らせページにて移行オプションをご確認ください。
*Fisheye および Crucible は除く
目的
This article will help ensure Confluence properly maps usernames in the user directory when a business requires a change of the userPrincipalName Attribute in Active Directory from sAMAccountName to mail.
For example, a username change from jsmith to john.smith@example.com in AD needs to be reflected in Confluence as the user's new username.
環境
Usage of this article depends on your current setup and how the change is performed.
- If the existing User Unique ID Attribute does not change, then your users will be automatically renamed (rather than creating duplicates). We strongly recommend this approach.
- If the existing User Unique ID Attribute will change, then you will end up with duplicate users. This will require manual DB manipulation to migrate content ownership and permissions. Thus. we do not recommend this approach.
ソリューション
Please follow best practices for Change Management and test and validate these settings in a Test/Development and Staging environment prior to rolling any changes into a Production environment. This is to validate these changes and ensure that they will function well within your infrastructure prior to placing these changes in production.
Changing user names in Confluence - Recommended Method
To migrate from sAMAccountName (e.g. jsmith) to email address (e.g. john.smith@example.com), and maintain content ownership, review the steps below:
- Navigate to
> General configuration > User Directories - Edit the appropriate directory
- Expand User Schema Settings
- Locate the User Unique ID Attribute:
- Verify that this attribute is configured to use an actual unique attribute (e.g. objectGUID) which will not change with the change from username to mail.
- Change the User Name Attribute from sAMAccountName to mail:
- Save your changes
- Perform a directory sync
- Validate the changes were successful