Buy Now | Ask a Question

Let's Meet at Team24

This year, we are happy to meet face-to-face with our customers and partners at Team24. It is an excellent opportunity for you to:

Learn more about the Pio Roadmap, share feedback about Pio apps, request new features for your use cases, request new importers/integrations, ask technical questions

Book a meeting with Hakan Bahadir, Founder, Pio Software

Mapping Azure AD Users with Jira Users and Jira Groups

Owned by Pio
Last updated: Jan 24, 2024
7 min read

The Assets module of JSM provides amazing features. Two of the useful capabilities are being able to define attributes as a “Jira User” type and/or “Jira Group”. On this page, we will provide 2 different methods to map Azure AD users with Jira Users and Jira Groups in JSM Assets.

This would be very handy in case you are using Atlassian Access and already have sync configuration for the Azure AD Groups.

The example use case could be as follows:

Use Case:

As an Asset and Configuration Manager, I would like to keep track of all the Microsoft Entra ID (a.k.a. Azure AD) User records and extend them by adding their Jira User and Jira Groups information.

The following are just 2 possible examples to fulfill the use case.

 Instructions

Option 1:

Update objects instantly when they are created and set the Jira User and Jira Groups.

  1. Install Azure AD (Microsoft Entra ID) Importer for JSM Assets from the marketplace.

  2. Watch the demo.

  3. Configure and import your organizational data (i.e. Users and Managers)

  4. Set the scheduling for automated replication.

  5. Select the “Azure AD” object schema and “Users” object type. Select “Attributes”.

  6. Add one new attribute to the end and call it “Jira User”. Set the type to “User”.

  7. Add another attribute for “Jira Groups” and set the type to “Groups”

  1. Create an automation rule at the Global level with the following steps.

Automation Component

Configuration

Explanation

Automation Component

Configuration

Explanation

 

 

Select the trigger for Object Trigger and click “Created“ tab. Select “Azure AD” object schema.

 

Check if the newly created object is one of Users.

objecttype = Users

 

Search for the user’s “Jira User” record using the Jira Rest API and get the accountId.

Send a web request to Jira API using the URL:

https://your-site-name.atlassian.net/rest/api/2/user/search?query={{object."E-mail Address"}}

The hidden part in the Authorization header needs to be in a format like:

Basic Y29udGFwgpxwaW8uc29mdHdhcyyyyWxNZmh4SVdUeFU1YWtwSHJDljI5xxxx

Please note that your Email Address and API Token need to be Base64 encoded as explained in the following document.

https://developer.atlassian.com/cloud/jira/platform/basic-auth-for-rest-apis/#supply-basic-auth-headers

 

Make sure that you found only one record.

Check the value for {{webResponse.body.size}}

  1. From this point please follow Scenario 1 or 2 described at the bottom of this page to complete your automation rule.

 

We recommend using the “Log Action” component between the steps above to see if you have mapped the fields properly and the data is flowing as expected. This will save time while you are troubleshooting your rule.

 

Option 2:

Update objects periodically (i.e. daily or hourly) and set the Jira User and Jira Groups.

  1. If you have a scheduled Azure AD import configuration in your Azure AD Importer for JSM Assets application then there is a chance that the Jira User is not created at the time of Azure AD import. This requires the mapping to be performed not in real-time but periodically (i.e. hourly or daily).

  2. Follow the same steps as Option 1 above, until Step 7.

  3. Create an automation rule at the Global level.

Automation Component

Configuration

Explanation

Automation Component

Configuration

Explanation

 

 

Select the rule trigger for “Scheduled”. Define the schedule period. I.e. every day at 3 AM GMT or hourly.

 

 

Select the the Users in the “Azure AD” object schema which don’t have the Jira User defined. Use the AQL:

objecttype = Users and "Jira User" is empty

 

Search for the user’s “Jira User” record using the Jira Rest API and get the accountId.

Send a web request to Jira API using the URL:

https://your-site-name.atlassian.net/rest/api/2/user/search?query={{object."E-mail Address"}}

The hidden part in the Authorization header needs to be in a format like:

Basic Y29udGFwgpxwaW8uc29mdHdhcyyyyWxNZmh4SVdUeFU1YWtwSHJDljI5xxxx

 

Please note that your Email Address and API Token need to be Base64 encoded as explained in the following document.

https://developer.atlassian.com/cloud/jira/platform/basic-auth-for-rest-apis/#supply-basic-auth-headers

 

Make sure that you found only one record.

Check {{webResponse.body.size}}

  1. From this point please follow Scenario 1 or 2 described at the bottom of this page to complete your automation rule.

 

 

 

Scenario 1

Add only the Jira User to the object.

Automation Component

Configuration

Explanation

Automation Component

Configuration

Explanation

 

Edit the created object and set the Jira User attribute using the Smart Value.

{{webResponse.body.accountId}}

Scenario 2

Add the Jira User and the Jira Groups.

Automation Component

Configuration

Explanation

Automation Component

Configuration

Explanation

 

 

Create a variable as jiraUserAccountId for {{webResponse.body.accountId}}

 

 

Send a web request to the following URL: https://asset-importers.atlassian.net/rest/api/3/user/groups?accountId={{jiraUserAccountId}}

This request collects the list of Jira Groups for the user from Jira Cloud platform.

 

 

Make sure that the response has the information needed by checking {{webResponse.body.size}}

 

Collect all the Jira Groups in to a variable called jiraGroups by using the smart value {{webResponse.body.name.asJsonObject("value").asJsonArray}}

 

 

To be able to update the object, first, you need to find the Workspace ID for your Assets environment by sending a web request to https://asset-importers.atlassian.net/rest/servicedeskapi/assets/workspace

 

 

Create a variable as workspaceId

for the {{webResponse.body.values.workspaceId}} smart value.

Not applicable: Not a step in the automation

 

Check the Object Type configuration for your Users object type and get the ID. In the screenshot you will see that it is 449 for our demo site.

 

Not applicable: Not a step in the automation

Take note for the object type attributes for the new attributes you created. You may find them in the screenshot as 6037 and 6038 for our demo site.

 

Add a new step to update the Object. Send a PUT command this time to the URL: https://api.atlassian.com/jsm/assets/workspace/{{workspaceId}}/v1/object/{{object.id}}

Select the web request body as “Custom data“ and copy paste the following JSON. Update the object type ID and attribute IDs accordingly.

{ "attributes": [ { "objectTypeAttributeId": "6037", "objectAttributeValues": [ { "value": "{{jiraUserAccountId}}" } ] }, { "objectTypeAttributeId": "6038", "objectAttributeValues": {{jiraGroups}} } ], "objectTypeId": "449" }

 

 

 

Add the response status code to the Audit log as {{webResponse.status}}

You should see “200” in the logs if everything is fine.

 

 

 

 

Buy Now | Ask a Question|Let's Meet at Team24