User groups
Default Group Configurations
Default group configuration gives you an option to choose a set of groups all users.
1. Default Group
A set of groups that will be assigned the type of users selected in Assign Default Group To option. This is useful when you want to assign application access to all the users.
Group Sync Settings
Mapping IdP groups to application groups allows you to assign and update user groups and permissions whenever their groups change on the IdP. For example, if a user is part of the administrators group on IdP, he can be assigned admin permission through mapping. If the user is removed from the administrators group on IdP in the future, he’ll be automatically removed from the application admin group.
Groups can be mapped in two ways, Manually or On-The-Fly
Manual Group Mapping is useful when your IdP group names and local application group names are different. In this case, you have to map each IdP group to the application group manually.
On-The-Fly Group Mapping can be used when your IdP group names and local application group names are an exact match. In this case, the app detects the groups and add users to those groups automatically.
1. Manual Group Mapping
Here you can manually map Jira groups with the groups from IDP.
You can also configure to import IDP groups, filter groups and whether to keep existing users or not.
Manual Group Mapping is useful when you want to manage groups from the IdP but the names of application groups and IdP groups are different.
For example, if the name of the group in IdP is IdP_users but the name of a similar group in the application is jira-software-users. In such cases, you have to manually map each IdP group to the application group.
2. On-The-Fly Group Mapping
Here users will be assigned to groups in Jira whose group name is the same as groups from IDP. If the group doesn't exist in Jira then it will be created.
You can configure to keep the existing user groups, filter groups and apply regular expressions on the groups.