Package com.atlassian.crowd.directory

Class AzureAdDirectory

java.lang.Object

com.atlassian.crowd.directory.AzureAdDirectory

All Implemented Interfaces:

RemoteDirectory, com.atlassian.crowd.embedded.api.Attributes

public class AzureAdDirectory
extends Object
implements RemoteDirectory

Microsoft Entra ID connector

Field Summary

Fields

Modifier and Type	Field	Description
static final String	ALTERNATIVE_USERNAME_ATTRIBUTE
static final String	AUTHORITY_API_ENDPOINT_ATTRIBUTE
static final String	CUSTOM_REGION_ATTRIBUTE_VALUE
static final String	FILTERED_GROUPS_ATTRIBUTE
static final String	GRAPH_API_ENDPOINT_ATTRIBUTE
static final String	GROUP_FILTERING_ENABLED_ATTRIBUTE
static final int	MAX_RESTRICTIONS_PER_QUERY
static final String	NATIVE_APP_ID_ATTRIBUTE
static final String	NOT_IMPLEMENTED
static final String	REGION_ATTRIBUTE
static final String	TENANT_ID_ATTRIBUTE
static final String	WEBAPP_CLIENT_ID_ATTRIBUTE
static final String	WEBAPP_CLIENT_SECRET_ATTRIBUTE

Constructor Summary

Constructors

Constructor	Description
AzureAdDirectory(AzureAdRestClientFactory restClientFactory, MicrosoftGraphQueryTranslator graphQueryTranslator, AzureAdRestEntityMapper restEntityMapper, UserCredentialVerifierFactory credentialVerifierFactory, AzureApiUriResolverFactory endpointDataProviderFactory, com.atlassian.crowd.embedded.spi.DcLicenseChecker dcLicenseChecker)

Method Summary

Modifier and Type	Method	Description
Group	addGroup(GroupTemplate group)
void	addGroupToGroup(String childGroup, String parentGroup)
User	addUser(UserTemplate user, com.atlassian.crowd.embedded.api.PasswordCredential credential)
UserWithAttributes	addUser(UserTemplateWithAttributes user, com.atlassian.crowd.embedded.api.PasswordCredential credential)
void	addUserToGroup(String username, String groupName)
User	authenticate(String name, com.atlassian.crowd.embedded.api.PasswordCredential credential)
BoundedCount	countDirectMembersOfGroup(String groupName, int querySizeHint)
AzureMembershipHelper	createMembershipHelper()
void	expireAllPasswords()
DeltaQueryResult<GroupWithMembershipChanges>	fetchGroupChanges(String syncToken)
DeltaQueryResult<UserWithAttributes>	fetchUserChanges(String syncToken)
Group	findGroupByName(String name)
GroupWithAttributes	findGroupWithAttributesByName(String name)
User	findUserByExternalId(String externalId)
User	findUserByName(String name)
UserWithAttributes	findUserWithAttributesByName(String name)
String	getAlternativeUsernameAttribute()	Returns name of the attribute that user name should be mapped to for external users.
RemoteDirectory	getAuthoritativeDirectory()
String	getDescriptiveName()
long	getDirectoryId()
List<GroupWithAttributes>	getFilteredGroups()
Set<String>	getGroupsNamesToFilter()
Set<String>	getKeys()
Optional<Set<String>>	getLocallyFilteredGroupNames()
Iterable<Membership>	getMemberships()
AzureAdRestClient	getRestClient()
MicrosoftGraphQueryTranslator	getTranslator()
AvatarReference	getUserAvatarByName(String username, int sizeHint)
String	getValue(String key)
Set<String>	getValues(String key)
boolean	isEmpty()
boolean	isGroupDirectGroupMember(String childGroup, String parentGroup)
boolean	isGroupFilteringEnabled()
boolean	isLocalGroupsEnabled()
boolean	isRolesDisabled()
boolean	isUserDirectGroupMember(String username, String groupName)
DeltaQueryResult<GroupWithMembershipChanges>	performGroupsDeltaQuery()
DeltaQueryResult<UserWithAttributes>	performUsersDeltaQuery()
void	removeGroup(String name)
void	removeGroupAttributes(String groupName, String attributeName)
void	removeGroupFromGroup(String childGroup, String parentGroup)
void	removeUser(String name)
void	removeUserAttributes(String username, String attributeName)
void	removeUserFromGroup(String username, String groupName)
Group	renameGroup(String oldName, String newName)
User	renameUser(String oldName, String newName)
<T> List<T>	searchGroupRelationships(MembershipQuery<T> query)
<T> List<T>	searchGroups(EntityQuery<T> query)
<T> List<T>	searchUsers(EntityQuery<T> query)
void	setAttributes(Map<String,String> attributes)
void	setDirectoryId(long directoryId)
void	storeGroupAttributes(String groupName, Map<String,Set<String>> attributes)
void	storeUserAttributes(String username, Map<String,Set<String>> attributes)
boolean	supportsDeltaQueryApi()
boolean	supportsInactiveAccounts()
boolean	supportsNestedGroups()
boolean	supportsPasswordExpiration()
boolean	supportsSettingEncryptedCredential()
void	testConnection()
Group	updateGroup(GroupTemplate group)
User	updateUser(UserTemplate user)
void	updateUserCredential(String username, com.atlassian.crowd.embedded.api.PasswordCredential credential)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface com.atlassian.crowd.directory.RemoteDirectory

updateUserFromRemoteDirectory, userAuthenticated

Field Details

WEBAPP_CLIENT_ID_ATTRIBUTE

public static final String WEBAPP_CLIENT_ID_ATTRIBUTE

See Also:

• Constant Field Values

WEBAPP_CLIENT_SECRET_ATTRIBUTE

public static final String WEBAPP_CLIENT_SECRET_ATTRIBUTE

See Also:

• Constant Field Values

TENANT_ID_ATTRIBUTE

public static final String TENANT_ID_ATTRIBUTE

See Also:

• Constant Field Values

NATIVE_APP_ID_ATTRIBUTE

public static final String NATIVE_APP_ID_ATTRIBUTE

See Also:

• Constant Field Values

GRAPH_API_ENDPOINT_ATTRIBUTE

public static final String GRAPH_API_ENDPOINT_ATTRIBUTE

See Also:

• Constant Field Values

AUTHORITY_API_ENDPOINT_ATTRIBUTE

public static final String AUTHORITY_API_ENDPOINT_ATTRIBUTE

See Also:

• Constant Field Values

REGION_ATTRIBUTE

public static final String REGION_ATTRIBUTE

See Also:

• Constant Field Values

CUSTOM_REGION_ATTRIBUTE_VALUE

public static final String CUSTOM_REGION_ATTRIBUTE_VALUE

See Also:

• Constant Field Values

FILTERED_GROUPS_ATTRIBUTE

public static final String FILTERED_GROUPS_ATTRIBUTE

See Also:

• Constant Field Values

GROUP_FILTERING_ENABLED_ATTRIBUTE

public static final String GROUP_FILTERING_ENABLED_ATTRIBUTE

See Also:

• Constant Field Values

NOT_IMPLEMENTED

public static final String NOT_IMPLEMENTED

See Also:

• Constant Field Values

ALTERNATIVE_USERNAME_ATTRIBUTE

public static final String ALTERNATIVE_USERNAME_ATTRIBUTE

See Also:

• Constant Field Values

MAX_RESTRICTIONS_PER_QUERY

public static final int MAX_RESTRICTIONS_PER_QUERY

See Also:

• Constant Field Values

Constructor Details

AzureAdDirectory

public AzureAdDirectory(AzureAdRestClientFactory restClientFactory,
 MicrosoftGraphQueryTranslator graphQueryTranslator,
 AzureAdRestEntityMapper restEntityMapper,
 UserCredentialVerifierFactory credentialVerifierFactory,
 AzureApiUriResolverFactory endpointDataProviderFactory,
 com.atlassian.crowd.embedded.spi.DcLicenseChecker dcLicenseChecker)

Method Details

getValues

@Nullable
public Set<String> getValues(String key)

Specified by:

getValues in interface com.atlassian.crowd.embedded.api.Attributes

getValue

@Nullable
public String getValue(String key)

Specified by:

getValue in interface com.atlassian.crowd.embedded.api.Attributes

getKeys

public Set<String> getKeys()

Specified by:

getKeys in interface com.atlassian.crowd.embedded.api.Attributes

isEmpty

public boolean isEmpty()

Specified by:

isEmpty in interface com.atlassian.crowd.embedded.api.Attributes

getDirectoryId

public long getDirectoryId()

Specified by:

getDirectoryId in interface RemoteDirectory

setDirectoryId

public void setDirectoryId(long directoryId)

Specified by:

setDirectoryId in interface RemoteDirectory

getDescriptiveName

@Nonnull
public String getDescriptiveName()

Specified by:

getDescriptiveName in interface RemoteDirectory

setAttributes

public void setAttributes(Map<String,String> attributes)

Specified by:

setAttributes in interface RemoteDirectory

findUserByName

@Nonnull
public User findUserByName(String name)
                    throws UserNotFoundException,
OperationFailedException

Specified by:

findUserByName in interface RemoteDirectory

Throws:

UserNotFoundException

OperationFailedException

findUserWithAttributesByName

@Nonnull
public UserWithAttributes findUserWithAttributesByName(String name)
                                                throws UserNotFoundException,
OperationFailedException

Specified by:

findUserWithAttributesByName in interface RemoteDirectory

Throws:

UserNotFoundException

OperationFailedException

findUserByExternalId

@Nonnull
public User findUserByExternalId(String externalId)
                          throws UserNotFoundException,
OperationFailedException

Specified by:

findUserByExternalId in interface RemoteDirectory

Throws:

UserNotFoundException

OperationFailedException

authenticate

@Nonnull
public User authenticate(String name,
 com.atlassian.crowd.embedded.api.PasswordCredential credential)
                  throws UserNotFoundException,
InactiveAccountException,
InvalidAuthenticationException,
ExpiredCredentialException,
OperationFailedException

Specified by:

authenticate in interface RemoteDirectory

Throws:

UserNotFoundException

InactiveAccountException

InvalidAuthenticationException

ExpiredCredentialException

OperationFailedException

addUser

@Nonnull
public User addUser(UserTemplate user,
 com.atlassian.crowd.embedded.api.PasswordCredential credential)
             throws InvalidUserException,
InvalidCredentialException,
UserAlreadyExistsException,
OperationFailedException

Specified by:

addUser in interface RemoteDirectory

Throws:

InvalidUserException

InvalidCredentialException

UserAlreadyExistsException

OperationFailedException

addUser

public UserWithAttributes addUser(UserTemplateWithAttributes user,
 com.atlassian.crowd.embedded.api.PasswordCredential credential)
                           throws InvalidUserException,
InvalidCredentialException,
UserAlreadyExistsException,
OperationFailedException

Specified by:

addUser in interface RemoteDirectory

Throws:

InvalidUserException

InvalidCredentialException

UserAlreadyExistsException

OperationFailedException

updateUser

@Nonnull
public User updateUser(UserTemplate user)
                throws InvalidUserException,
UserNotFoundException,
OperationFailedException

Specified by:

updateUser in interface RemoteDirectory

Throws:

InvalidUserException

UserNotFoundException

OperationFailedException

updateUserCredential

public void updateUserCredential(String username,
 com.atlassian.crowd.embedded.api.PasswordCredential credential)
                          throws UserNotFoundException,
InvalidCredentialException,
OperationFailedException

Specified by:

updateUserCredential in interface RemoteDirectory

Throws:

UserNotFoundException

InvalidCredentialException

OperationFailedException

renameUser

@Nonnull
public User renameUser(String oldName,
 String newName)
                throws UserNotFoundException,
InvalidUserException,
UserAlreadyExistsException,
OperationFailedException

Specified by:

renameUser in interface RemoteDirectory

Throws:

UserNotFoundException

InvalidUserException

UserAlreadyExistsException

OperationFailedException

storeUserAttributes

public void storeUserAttributes(String username,
 Map<String,Set<String>> attributes)
                         throws UserNotFoundException,
OperationFailedException

Specified by:

storeUserAttributes in interface RemoteDirectory

Throws:

UserNotFoundException

OperationFailedException

removeUserAttributes

public void removeUserAttributes(String username,
 String attributeName)
                          throws UserNotFoundException,
OperationFailedException

Specified by:

removeUserAttributes in interface RemoteDirectory

Throws:

UserNotFoundException

OperationFailedException

removeUser

public void removeUser(String name)
                throws UserNotFoundException,
OperationFailedException

Specified by:

removeUser in interface RemoteDirectory

Throws:

UserNotFoundException

OperationFailedException

searchUsers

@Nonnull
public <T> List<T> searchUsers(EntityQuery<T> query)
                        throws OperationFailedException

Specified by:

searchUsers in interface RemoteDirectory

Throws:

OperationFailedException

findGroupByName

@Nonnull
public Group findGroupByName(String name)
                      throws GroupNotFoundException,
OperationFailedException

Specified by:

findGroupByName in interface RemoteDirectory

Throws:

GroupNotFoundException

OperationFailedException

findGroupWithAttributesByName

@Nonnull
public GroupWithAttributes findGroupWithAttributesByName(String name)
                                                  throws GroupNotFoundException,
OperationFailedException

Specified by:

findGroupWithAttributesByName in interface RemoteDirectory

Throws:

GroupNotFoundException

OperationFailedException

addGroup

@Nonnull
public Group addGroup(GroupTemplate group)
               throws InvalidGroupException,
OperationFailedException

Specified by:

addGroup in interface RemoteDirectory

Throws:

InvalidGroupException

OperationFailedException

updateGroup

@Nonnull
public Group updateGroup(GroupTemplate group)
                  throws InvalidGroupException,
GroupNotFoundException,
ReadOnlyGroupException,
OperationFailedException

Specified by:

updateGroup in interface RemoteDirectory

Throws:

InvalidGroupException

GroupNotFoundException

ReadOnlyGroupException

OperationFailedException

renameGroup

@Nonnull
public Group renameGroup(String oldName,
 String newName)
                  throws GroupNotFoundException,
InvalidGroupException,
OperationFailedException

Specified by:

renameGroup in interface RemoteDirectory

Throws:

GroupNotFoundException

InvalidGroupException

OperationFailedException

storeGroupAttributes

public void storeGroupAttributes(String groupName,
 Map<String,Set<String>> attributes)
                          throws GroupNotFoundException,
OperationFailedException

Specified by:

storeGroupAttributes in interface RemoteDirectory

Throws:

GroupNotFoundException

OperationFailedException

removeGroupAttributes

public void removeGroupAttributes(String groupName,
 String attributeName)
                           throws GroupNotFoundException,
OperationFailedException

Specified by:

removeGroupAttributes in interface RemoteDirectory

Throws:

GroupNotFoundException

OperationFailedException

removeGroup

public void removeGroup(String name)
                 throws GroupNotFoundException,
ReadOnlyGroupException,
OperationFailedException

Specified by:

removeGroup in interface RemoteDirectory

Throws:

GroupNotFoundException

ReadOnlyGroupException

OperationFailedException

searchGroups

@Nonnull
public <T> List<T> searchGroups(EntityQuery<T> query)
                         throws OperationFailedException

Specified by:

searchGroups in interface RemoteDirectory

Throws:

OperationFailedException

isUserDirectGroupMember

public boolean isUserDirectGroupMember(String username,
 String groupName)
                                throws OperationFailedException

Specified by:

isUserDirectGroupMember in interface RemoteDirectory

Throws:

OperationFailedException

isGroupDirectGroupMember

public boolean isGroupDirectGroupMember(String childGroup,
 String parentGroup)
                                 throws OperationFailedException

Specified by:

isGroupDirectGroupMember in interface RemoteDirectory

Throws:

OperationFailedException

countDirectMembersOfGroup

@Nonnull
public BoundedCount countDirectMembersOfGroup(String groupName,
 int querySizeHint)
                                       throws OperationFailedException

Specified by:

countDirectMembersOfGroup in interface RemoteDirectory

Throws:

OperationFailedException

addUserToGroup

public void addUserToGroup(String username,
 String groupName)
                    throws GroupNotFoundException,
UserNotFoundException,
ReadOnlyGroupException,
OperationFailedException,
MembershipAlreadyExistsException

Specified by:

addUserToGroup in interface RemoteDirectory

Throws:

GroupNotFoundException

UserNotFoundException

ReadOnlyGroupException

OperationFailedException

MembershipAlreadyExistsException

addGroupToGroup

public void addGroupToGroup(String childGroup,
 String parentGroup)
                     throws GroupNotFoundException,
InvalidMembershipException,
ReadOnlyGroupException,
OperationFailedException,
MembershipAlreadyExistsException

Specified by:

addGroupToGroup in interface RemoteDirectory

Throws:

GroupNotFoundException

InvalidMembershipException

ReadOnlyGroupException

OperationFailedException

MembershipAlreadyExistsException

removeUserFromGroup

public void removeUserFromGroup(String username,
 String groupName)
                         throws GroupNotFoundException,
UserNotFoundException,
MembershipNotFoundException,
ReadOnlyGroupException,
OperationFailedException

Specified by:

removeUserFromGroup in interface RemoteDirectory

Throws:

GroupNotFoundException

UserNotFoundException

MembershipNotFoundException

ReadOnlyGroupException

OperationFailedException

removeGroupFromGroup

public void removeGroupFromGroup(String childGroup,
 String parentGroup)
                          throws GroupNotFoundException,
InvalidMembershipException,
MembershipNotFoundException,
ReadOnlyGroupException,
OperationFailedException

Specified by:

removeGroupFromGroup in interface RemoteDirectory

Throws:

GroupNotFoundException

InvalidMembershipException

MembershipNotFoundException

ReadOnlyGroupException

OperationFailedException

searchGroupRelationships

@Nonnull
public <T> List<T> searchGroupRelationships(MembershipQuery<T> query)
                                     throws OperationFailedException

Specified by:

searchGroupRelationships in interface RemoteDirectory

Throws:

OperationFailedException

testConnection

public void testConnection()
                    throws OperationFailedException

Specified by:

testConnection in interface RemoteDirectory

Throws:

OperationFailedException

supportsInactiveAccounts

public boolean supportsInactiveAccounts()

Specified by:

supportsInactiveAccounts in interface RemoteDirectory

supportsNestedGroups

public boolean supportsNestedGroups()

Specified by:

supportsNestedGroups in interface RemoteDirectory

supportsPasswordExpiration

public boolean supportsPasswordExpiration()

Specified by:

supportsPasswordExpiration in interface RemoteDirectory

supportsSettingEncryptedCredential

public boolean supportsSettingEncryptedCredential()

Specified by:

supportsSettingEncryptedCredential in interface RemoteDirectory

isRolesDisabled

public boolean isRolesDisabled()

Specified by:

isRolesDisabled in interface RemoteDirectory

getMemberships

@Nonnull
public Iterable<Membership> getMemberships()
                                    throws OperationFailedException

Specified by:

getMemberships in interface RemoteDirectory

Throws:

OperationFailedException

getAuthoritativeDirectory

@Nonnull
public RemoteDirectory getAuthoritativeDirectory()

Specified by:

getAuthoritativeDirectory in interface RemoteDirectory

expireAllPasswords

public void expireAllPasswords()
                        throws OperationFailedException

Specified by:

expireAllPasswords in interface RemoteDirectory

Throws:

OperationFailedException

getUserAvatarByName

@Nullable
public AvatarReference getUserAvatarByName(String username,
 int sizeHint)

Specified by:

getUserAvatarByName in interface RemoteDirectory

getLocallyFilteredGroupNames

public Optional<Set<String>> getLocallyFilteredGroupNames()

Specified by:

getLocallyFilteredGroupNames in interface RemoteDirectory

isGroupFilteringEnabled

public boolean isGroupFilteringEnabled()

getGroupsNamesToFilter

public Set<String> getGroupsNamesToFilter()

getFilteredGroups

public List<GroupWithAttributes> getFilteredGroups()
                                            throws OperationFailedException

Throws:

OperationFailedException

performUsersDeltaQuery

public DeltaQueryResult<UserWithAttributes> performUsersDeltaQuery()
                                                            throws OperationFailedException

Throws:

OperationFailedException

performGroupsDeltaQuery

public DeltaQueryResult<GroupWithMembershipChanges> performGroupsDeltaQuery()
                                                                     throws OperationFailedException

Throws:

OperationFailedException

fetchGroupChanges

public DeltaQueryResult<GroupWithMembershipChanges> fetchGroupChanges(String syncToken)
                                                               throws OperationFailedException

Throws:

OperationFailedException

fetchUserChanges

public DeltaQueryResult<UserWithAttributes> fetchUserChanges(String syncToken)
                                                      throws OperationFailedException

Throws:

OperationFailedException

supportsDeltaQueryApi

public boolean supportsDeltaQueryApi()

createMembershipHelper

public AzureMembershipHelper createMembershipHelper()

getRestClient

public AzureAdRestClient getRestClient()

getTranslator

public MicrosoftGraphQueryTranslator getTranslator()

isLocalGroupsEnabled

public boolean isLocalGroupsEnabled()

getAlternativeUsernameAttribute

public String getAlternativeUsernameAttribute()

Returns name of the attribute that user name should be mapped to for external users.