Atlassian Crowd
Crowd is Atlassian’s centralized identity and access management product for self-managed deployments. It aggregates users from directories (e.g., LDAP/Active Directory) and provides single sign-on across Atlassian applications (Jira, Confluence, Bitbucket, etc.).
Key Capabilities
-
Central user directory & auth: Manage users and groups from multiple directories (e.g., AD/LDAP, internal) via a single admin console.
-
Session-based SSO across Atlassian apps (“SSO 2.0”): One login for Jira/Confluence/Bitbucket (Server/Data Center) across domains; configured per application in Crowd.
-
Delegation choice for DC apps: For SSO on Atlassian Data Center products, customers can choose login via Crowd or an external identity provider (e.g., SAML/OIDC-capable IdP) using Atlassian’s DC SSO features.
-
Extensibility via Marketplace apps: SAML/OIDC login to Crowd and SCIM user provisioning are available through third-party Marketplace apps (not built into Crowd).
Limitations
-
Not a general-purpose SAML/OIDC IdP: Atlassian does not provide full, native SAML or OIDC IdP capabilities in Crowd (historically limited SAML to Google Apps; general SAML in Crowd is not planned).
-
OpenID (CrowdID) removed: Crowd’s legacy OpenID server (CrowdID) and OpenID client reached end of support in Crowd 5.3.0.
-
SCIM not native: No Atlassian-authored documentation for native SCIM in Crowd; provisioning relies on third-party Marketplace apps.
-
Lifecycle constraints for self-managed: Atlassian Server is EoS (Feb 15, 2024). Data Center (including Crowd DC) is scheduled for end of life on March 28, 2029; new DC purchases end March 30, 2026. Plan migrations accordingly.