Package com.atlassian.crowd.directory

Class AzureAdDirectory

java.lang.Object

com.atlassian.crowd.directory.AzureAdDirectory

All Implemented Interfaces:

RemoteDirectory, Attributes

public class AzureAdDirectory
extends Object
implements RemoteDirectory

Microsoft Entra ID connector

Field Summary

Fields

Modifier and Type	Field	Description
static final String	ALTERNATIVE_USERNAME_ATTRIBUTE
static final String	AUTHORITY_API_ENDPOINT_ATTRIBUTE
static final String	CUSTOM_REGION_ATTRIBUTE_VALUE
static final String	FILTERED_GROUPS_ATTRIBUTE
static final String	GRAPH_API_ENDPOINT_ATTRIBUTE
static final String	GROUP_FILTERING_ENABLED_ATTRIBUTE
static final int	MAX_RESTRICTIONS_PER_QUERY
static final String	NATIVE_APP_ID_ATTRIBUTE
static final String	NOT_IMPLEMENTED
static final String	REGION_ATTRIBUTE
static final String	TENANT_ID_ATTRIBUTE
static final String	WEBAPP_CLIENT_ID_ATTRIBUTE
static final String	WEBAPP_CLIENT_SECRET_ATTRIBUTE

Constructor Summary

Constructors

Constructor	Description
AzureAdDirectory(AzureAdRestClientFactory restClientFactory, MicrosoftGraphQueryTranslator graphQueryTranslator, AzureAdRestEntityMapper restEntityMapper, UserCredentialVerifierFactory credentialVerifierFactory, AzureApiUriResolverFactory endpointDataProviderFactory, DcLicenseChecker dcLicenseChecker)

Method Summary

Modifier and Type	Method	Description
Group	addGroup(GroupTemplate group)	Adds a group to the directory store.
void	addGroupToGroup(String childGroup, String parentGroup)	Adds a group as a member of a parent group.
User	addUser(UserTemplate user, PasswordCredential credential)	Adds a user to the directory store.
UserWithAttributes	addUser(UserTemplateWithAttributes user, PasswordCredential credential)	Adds a user to the directory store.
void	addUserToGroup(String username, String groupName)	Adds a user as a member of a group.
User	authenticate(String name, PasswordCredential credential)	Authenticates a user with the directory store.
BoundedCount	countDirectMembersOfGroup(String groupName, int querySizeHint)	Count the direct members of a group in the remote directory.
AzureMembershipHelper	createMembershipHelper()
void	expireAllPasswords()	Sets the UserConstants.REQUIRES_PASSWORD_CHANGE attribute to true for all users in the directory using bulk operations
DeltaQueryResult<GroupWithMembershipChanges>	fetchGroupChanges(String syncToken)
DeltaQueryResult<UserWithAttributes>	fetchUserChanges(String syncToken)
Group	findGroupByName(String name)	Finds the group that matches the supplied name.
GroupWithAttributes	findGroupWithAttributesByName(String name)	Finds the group that matches the supplied name.
User	findUserByExternalId(String externalId)	Finds the user that matches the supplied externalId.
User	findUserByName(String name)	Finds the user that matches the supplied name.
UserWithAttributes	findUserWithAttributesByName(String name)	Finds the user that matches the supplied name.
String	getAlternativeUsernameAttribute()	Returns name of the attribute that user name should be mapped to for external users.
RemoteDirectory	getAuthoritativeDirectory()
String	getDescriptiveName()	Returns a descriptive name for the type of directory.
long	getDirectoryId()	Gets the internal unique directoryId of the directory store.
List<GroupWithAttributes>	getFilteredGroups()
Set<String>	getGroupsNamesToFilter()
Set<String>	getKeys()	Gets all the keys of the attributes.
Optional<Set<String>>	getLocallyFilteredGroupNames()	Returns locally filtered group names.
Iterable<Membership>	getMemberships()	Get an iterable view of the available group memberships.
AzureAdRestClient	getRestClient()
MicrosoftGraphQueryTranslator	getTranslator()
AvatarReference	getUserAvatarByName(String username, int sizeHint)	Return an avatar, if available, for the named user.
String	getValue(String key)	Returns any value associated with the given key, returns null if there is no value.
Set<String>	getValues(String key)	Get all the values associated with a given key.
boolean	isEmpty()
boolean	isGroupDirectGroupMember(String childGroup, String parentGroup)	Determines if a group is a direct member of another group.
boolean	isGroupFilteringEnabled()
boolean	isLocalGroupsEnabled()
boolean	isRolesDisabled()	Expose whether the directory has roles disabled.
boolean	isUserDirectGroupMember(String username, String groupName)	Determines if a user is a direct member of a group.
DeltaQueryResult<GroupWithMembershipChanges>	performGroupsDeltaQuery()
DeltaQueryResult<UserWithAttributes>	performUsersDeltaQuery()
void	removeGroup(String name)	Removes the group that matches the supplied name.
void	removeGroupAttributes(String groupName, String attributeName)	Removes all the values for a single attribute key for a group.
void	removeGroupFromGroup(String childGroup, String parentGroup)	Removes a group as a member of a parent group.
void	removeUser(String name)	Removes the user that matches the supplied name.
void	removeUserAttributes(String username, String attributeName)	Removes all the values for a single attribute key for a user.
void	removeUserFromGroup(String username, String groupName)	Removes a user as a member of a group.
Group	renameGroup(String oldName, String newName)	Renames a group.
User	renameUser(String oldName, String newName)	Renames a user.
<T> List<T>	searchGroupRelationships(MembershipQuery<T> query)	Searches for membership information.
<T> List<T>	searchGroups(EntityQuery<T> query)	Searches for groups that match the supplied query criteria.
<T> List<T>	searchUsers(EntityQuery<T> query)	Searches for users that match the supplied query criteria.
void	setAttributes(Map<String,String> attributes)	When a directory store is loaded, the attributes map will be set by the Crowd framework.
void	setDirectoryId(long directoryId)	When a directory store is loaded, the directoryId will be set by the crowd framework.
void	storeGroupAttributes(String groupName, Map<String,Set<String>> attributes)	Adds or updates a group's attributes with the new Map of attribute values in the directory specified by the passed in directoryId.
void	storeUserAttributes(String username, Map<String,Set<String>> attributes)	Adds or updates a user's attributes with the new Map of attribute values in the directory specified by the passed in directoryId.
boolean	supportsDeltaQueryApi()
boolean	supportsInactiveAccounts()	Return true if this directory supports inactive users and groups.
boolean	supportsNestedGroups()	Allows us to only display nested-group related UI for directories that support it.
boolean	supportsPasswordExpiration()	Return true if this directory supports manually expiring passwords.
boolean	supportsSettingEncryptedCredential()	If this method returns true, then calling RemoteDirectory.updateUserCredential(String, PasswordCredential) or RemoteDirectory.addUser(com.atlassian.crowd.model.user.UserTemplate, com.atlassian.crowd.embedded.api.PasswordCredential) with a PasswordCredential instance where PasswordCredential.isEncryptedCredential() returns true and the instance is not equal to PasswordCredential.NONE will succeed; otherwise, it will fail.
void	testConnection()	Test if a connection to the directory server can be established.
Group	updateGroup(GroupTemplate group)	Updates the group.
User	updateUser(UserTemplate user)	Updates the user.
void	updateUserCredential(String username, PasswordCredential credential)	Updates the password for a user.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface com.atlassian.crowd.directory.RemoteDirectory

updateUserFromRemoteDirectory, userAuthenticated

Field Details

WEBAPP_CLIENT_ID_ATTRIBUTE

public static final String WEBAPP_CLIENT_ID_ATTRIBUTE

See Also:

• Constant Field Values

WEBAPP_CLIENT_SECRET_ATTRIBUTE

public static final String WEBAPP_CLIENT_SECRET_ATTRIBUTE

See Also:

• Constant Field Values

TENANT_ID_ATTRIBUTE

public static final String TENANT_ID_ATTRIBUTE

See Also:

• Constant Field Values

NATIVE_APP_ID_ATTRIBUTE

public static final String NATIVE_APP_ID_ATTRIBUTE

See Also:

• Constant Field Values

GRAPH_API_ENDPOINT_ATTRIBUTE

public static final String GRAPH_API_ENDPOINT_ATTRIBUTE

See Also:

• Constant Field Values

AUTHORITY_API_ENDPOINT_ATTRIBUTE

public static final String AUTHORITY_API_ENDPOINT_ATTRIBUTE

See Also:

• Constant Field Values

REGION_ATTRIBUTE

public static final String REGION_ATTRIBUTE

See Also:

• Constant Field Values

CUSTOM_REGION_ATTRIBUTE_VALUE

public static final String CUSTOM_REGION_ATTRIBUTE_VALUE

See Also:

• Constant Field Values

FILTERED_GROUPS_ATTRIBUTE

public static final String FILTERED_GROUPS_ATTRIBUTE

See Also:

• Constant Field Values

GROUP_FILTERING_ENABLED_ATTRIBUTE

public static final String GROUP_FILTERING_ENABLED_ATTRIBUTE

See Also:

• Constant Field Values

NOT_IMPLEMENTED

public static final String NOT_IMPLEMENTED

See Also:

• Constant Field Values

ALTERNATIVE_USERNAME_ATTRIBUTE

public static final String ALTERNATIVE_USERNAME_ATTRIBUTE

See Also:

• Constant Field Values

MAX_RESTRICTIONS_PER_QUERY

public static final int MAX_RESTRICTIONS_PER_QUERY

See Also:

• Constant Field Values

Constructor Details

AzureAdDirectory

public AzureAdDirectory(AzureAdRestClientFactory restClientFactory,
 MicrosoftGraphQueryTranslator graphQueryTranslator,
 AzureAdRestEntityMapper restEntityMapper,
 UserCredentialVerifierFactory credentialVerifierFactory,
 AzureApiUriResolverFactory endpointDataProviderFactory,
 DcLicenseChecker dcLicenseChecker)

Method Details

getValues

@Nullable
public Set<String> getValues(String key)

Description copied from interface: Attributes

Get all the values associated with a given key. Duplicate values are not allowed, and this should be enforced case-insensitively to match the behaviour of LDAP servers. Will return null if the key does not exist.

Specified by:

getValues in interface Attributes

Parameters:

key - the key to retrieve the values for

Returns:

the values associated with the given key. It may return null or empty set if the key does not exist.

getValue

@Nullable
public String getValue(String key)

Description copied from interface: Attributes

Returns any value associated with the given key, returns null if there is no value.

Specified by:

getValue in interface Attributes

Parameters:

key - the key to retrieve the value for

Returns:

any value associated with the given key, or null if there is no value

getKeys

public Set<String> getKeys()

Description copied from interface: Attributes

Gets all the keys of the attributes. Warning: case-insensitive keys are currently no enforced, however this is the case for LDAP, so this may be implemented in the future.

Specified by:

getKeys in interface Attributes

Returns:

a set of all the keys.

isEmpty

public boolean isEmpty()

Specified by:

isEmpty in interface Attributes

Returns:

true if there are no attributes

getDirectoryId

public long getDirectoryId()

Description copied from interface: RemoteDirectory

Gets the internal unique directoryId of the directory store.

Specified by:

getDirectoryId in interface RemoteDirectory

Returns:

The directoryId.

setDirectoryId

public void setDirectoryId(long directoryId)

Description copied from interface: RemoteDirectory

When a directory store is loaded, the directoryId will be set by the crowd framework.

Specified by:

setDirectoryId in interface RemoteDirectory

Parameters:

directoryId - The unique directoryId of the DirectoryImpl stored in the database.

getDescriptiveName

@Nonnull
public String getDescriptiveName()

Description copied from interface: RemoteDirectory

Returns a descriptive name for the type of directory.

Specified by:

getDescriptiveName in interface RemoteDirectory

Returns:

descriptive name.

setAttributes

public void setAttributes(Map<String,String> attributes)

Description copied from interface: RemoteDirectory

When a directory store is loaded, the attributes map will be set by the Crowd framework. Implementations may store a reference to this map in order to implement the Attributes

The Map is immutable and implementations are required to maintain immutability.

Specified by:

setAttributes in interface RemoteDirectory

Parameters:

attributes - attributes map.

findUserByName

@Nonnull
public User findUserByName(String name)
                    throws UserNotFoundException,
OperationFailedException

Description copied from interface: RemoteDirectory

Finds the user that matches the supplied name.

Specified by:

findUserByName in interface RemoteDirectory

Parameters:

name - the name of the user (username).

Returns:

user entity.

Throws:

UserNotFoundException - a user with the supplied name does not exist.

OperationFailedException - underlying directory implementation failed to execute the operation.

findUserWithAttributesByName

@Nonnull
public UserWithAttributes findUserWithAttributesByName(String name)
                                                throws UserNotFoundException,
OperationFailedException

Description copied from interface: RemoteDirectory

Finds the user that matches the supplied name.

Specified by:

findUserWithAttributesByName in interface RemoteDirectory

Parameters:

name - the name of the user (username).

Returns:

user entity with attributes.

Throws:

UserNotFoundException - a user with the supplied name does not exist.

OperationFailedException - underlying directory implementation failed to execute the operation.

findUserByExternalId

@Nonnull
public User findUserByExternalId(String externalId)
                          throws UserNotFoundException,
OperationFailedException

Description copied from interface: RemoteDirectory

Finds the user that matches the supplied externalId. This is an optional method that may not be implemented on all directory types. Currently it is implemented for LDAP and Internal directories but not Crowd directories.

Specified by:

findUserByExternalId in interface RemoteDirectory

Parameters:

externalId - the externalId of the user

Returns:

the user that matches the supplied externalId.

Throws:

UserNotFoundException - a user with the supplied externalId does not exist.

OperationFailedException - underlying directory implementation failed to execute the operation.

See Also:

• RemoteDirectory.findUserByName(String)

authenticate

@Nonnull
public User authenticate(String name,
 PasswordCredential credential)
                  throws UserNotFoundException,
InactiveAccountException,
InvalidAuthenticationException,
ExpiredCredentialException,
OperationFailedException

Description copied from interface: RemoteDirectory

Authenticates a user with the directory store.

Specified by:

authenticate in interface RemoteDirectory

Parameters:

name - The name of the user (username).

credential - The supplied credentials (password).

Returns:

The populated user if the authentication is valid.

Throws:

UserNotFoundException - The user with the supplied name does not exist.

InactiveAccountException - The supplied user is inactive.

InvalidAuthenticationException - Authentication with the provided credentials failed.

ExpiredCredentialException - The user's credentials have expired. The user must change their credentials in order to successfully authenticate.

OperationFailedException - underlying directory implementation failed to execute the operation.

addUser

@Nonnull
public User addUser(UserTemplate user,
 PasswordCredential credential)
             throws InvalidUserException,
InvalidCredentialException,
UserAlreadyExistsException,
OperationFailedException

Description copied from interface: RemoteDirectory

Adds a user to the directory store.

Specified by:

addUser in interface RemoteDirectory

Parameters:

user - template of the user to add.

credential - a password, or PasswordCredential.NONE for an account that cannot login with any password

Returns:

the added user retrieved from the underlying store.

Throws:

InvalidUserException - The supplied user is invalid.

InvalidCredentialException - The supplied credential is invalid.

UserAlreadyExistsException - The user already exists

OperationFailedException - underlying directory implementation failed to execute the operation.

See Also:

• RemoteDirectory.supportsSettingEncryptedCredential()

addUser

public UserWithAttributes addUser(UserTemplateWithAttributes user,
 PasswordCredential credential)
                           throws InvalidUserException,
InvalidCredentialException,
UserAlreadyExistsException,
OperationFailedException

Description copied from interface: RemoteDirectory

Adds a user to the directory store.

Specified by:

addUser in interface RemoteDirectory

Parameters:

user - template of the user to add.

credential - a password, or PasswordCredential.NONE for an account that cannot login with any password

Returns:

the added user retrieved from the underlying store.

Throws:

InvalidUserException - The supplied user is invalid.

InvalidCredentialException - The supplied credential is invalid.

UserAlreadyExistsException - The user already exists

OperationFailedException - underlying directory implementation failed to execute the operation.

See Also:

• RemoteDirectory.supportsSettingEncryptedCredential()

updateUser

@Nonnull
public User updateUser(UserTemplate user)
                throws InvalidUserException,
UserNotFoundException,
OperationFailedException

Description copied from interface: RemoteDirectory

Updates the user.

Specified by:

updateUser in interface RemoteDirectory

Parameters:

user - The user to update.

Returns:

the updated user retrieved from the underlying store.

Throws:

InvalidUserException - the supplied user is invalid.

UserNotFoundException - the user does not exist in the directory store.

OperationFailedException - underlying directory implementation failed to execute the operation.

updateUserCredential

public void updateUserCredential(String username,
 PasswordCredential credential)
                          throws UserNotFoundException,
InvalidCredentialException,
OperationFailedException

Description copied from interface: RemoteDirectory

Updates the password for a user.

Specified by:

updateUserCredential in interface RemoteDirectory

Parameters:

username - The name of the user (username).

credential - The new credential (password).

Throws:

UserNotFoundException - The user does not exist.

InvalidCredentialException - The supplied credential is invalid.

OperationFailedException - underlying directory implementation failed to execute the operation.

See Also:

• RemoteDirectory.supportsSettingEncryptedCredential()

renameUser

@Nonnull
public User renameUser(String oldName,
 String newName)
                throws UserNotFoundException,
InvalidUserException,
UserAlreadyExistsException,
OperationFailedException

Description copied from interface: RemoteDirectory

Renames a user.

Specified by:

renameUser in interface RemoteDirectory

Parameters:

oldName - name of existing user.

newName - desired name of user.

Returns:

renamed user.

Throws:

UserNotFoundException - if the user with the existing name does not exist.

InvalidUserException - if the new username is invalid.

UserAlreadyExistsException - if the newName already exists.

OperationFailedException - if the underlying directory implementation failed to execute the operation.

storeUserAttributes

public void storeUserAttributes(String username,
 Map<String,Set<String>> attributes)
                         throws UserNotFoundException,
OperationFailedException

Description copied from interface: RemoteDirectory

Adds or updates a user's attributes with the new Map of attribute values in the directory specified by the passed in directoryId.

The attributes map represents new or updated attributes and does not replace existing attributes unless the key of an attribute matches the key of an existing

Attributes with values of empty sets are not added (these attributes are effectively removed).

Specified by:

storeUserAttributes in interface RemoteDirectory

Parameters:

username - name of user to update.

attributes - new or updated attributes (attributes that don't need changing should not appear in this Map).

Throws:

UserNotFoundException - user with supplied username does not exist.

OperationFailedException - underlying directory implementation failed to execute the operation.

removeUserAttributes

public void removeUserAttributes(String username,
 String attributeName)
                          throws UserNotFoundException,
OperationFailedException

Description copied from interface: RemoteDirectory

Removes all the values for a single attribute key for a user. If the attribute key does not exist nothing will happen.

Specified by:

removeUserAttributes in interface RemoteDirectory

Parameters:

username - name of the user to update.

attributeName - name of attribute to remove.

Throws:

UserNotFoundException - user with supplied username does not exist.

OperationFailedException - underlying directory implementation failed to execute the operation.

removeUser

public void removeUser(String name)
                throws UserNotFoundException,
OperationFailedException

Description copied from interface: RemoteDirectory

Removes the user that matches the supplied name.

Specified by:

removeUser in interface RemoteDirectory

Parameters:

name - The name of the user (username).

Throws:

UserNotFoundException - The user does not exist.

OperationFailedException - underlying directory implementation failed to execute the operation.

searchUsers

@Nonnull
public <T> List<T> searchUsers(EntityQuery<T> query)
                        throws OperationFailedException

Description copied from interface: RemoteDirectory

Searches for users that match the supplied query criteria.

The users will be returned in a stable order including across pagination boundaries (excluding modification).

Specified by:

searchUsers in interface RemoteDirectory

Parameters:

query - EntityQuery for Entity.USER.

Returns:

List<User> or List<String> of users/usernames matching the search criteria. An empty List will be returned if no users matching the criteria are found.

Throws:

OperationFailedException - if the underlying directory implementation failed to execute the operation

findGroupByName

@Nonnull
public Group findGroupByName(String name)
                      throws GroupNotFoundException,
OperationFailedException

Description copied from interface: RemoteDirectory

Finds the group that matches the supplied name.

Specified by:

findGroupByName in interface RemoteDirectory

Parameters:

name - the name of the group.

Returns:

group entity.

Throws:

GroupNotFoundException - a group with the supplied name does not exist.

OperationFailedException - underlying directory implementation failed to execute the operation.

findGroupWithAttributesByName

@Nonnull
public GroupWithAttributes findGroupWithAttributesByName(String name)
                                                  throws GroupNotFoundException,
OperationFailedException

Description copied from interface: RemoteDirectory

Finds the group that matches the supplied name.

Specified by:

findGroupWithAttributesByName in interface RemoteDirectory

Parameters:

name - the name of the group.

Returns:

group entity with attributes.

Throws:

GroupNotFoundException - a group with the supplied name does not exist.

OperationFailedException - underlying directory implementation failed to execute the operation.

addGroup

@Nonnull
public Group addGroup(GroupTemplate group)
               throws InvalidGroupException,
OperationFailedException

Description copied from interface: RemoteDirectory

Adds a group to the directory store.

Specified by:

addGroup in interface RemoteDirectory

Parameters:

group - template of the group to add.

Returns:

the added group retrieved from the underlying store.

Throws:

InvalidGroupException - The supplied group is invalid or it already exists in the directory.

OperationFailedException - underlying directory implementation failed to execute the operation.

updateGroup

@Nonnull
public Group updateGroup(GroupTemplate group)
                  throws InvalidGroupException,
GroupNotFoundException,
ReadOnlyGroupException,
OperationFailedException

Description copied from interface: RemoteDirectory

Updates the group.

Specified by:

updateGroup in interface RemoteDirectory

Parameters:

group - The group to update.

Returns:

the updated group retrieved from the underlying store.

Throws:

InvalidGroupException - the supplied group is invalid.

GroupNotFoundException - the group does not exist in the directory store.

ReadOnlyGroupException - the group is read-only

OperationFailedException - underlying directory implementation failed to execute the operation.

renameGroup

@Nonnull
public Group renameGroup(String oldName,
 String newName)
                  throws GroupNotFoundException,
InvalidGroupException,
OperationFailedException

Description copied from interface: RemoteDirectory

Renames a group.

Specified by:

renameGroup in interface RemoteDirectory

Parameters:

oldName - name of existing group.

newName - desired name of group.

Returns:

renamed group.

Throws:

GroupNotFoundException - if the group with the existing name does not exist.

InvalidGroupException - if the new group name is invalid or already exists in the directory.

OperationFailedException - if the underlying directory implementation failed to execute the operation.

storeGroupAttributes

public void storeGroupAttributes(String groupName,
 Map<String,Set<String>> attributes)
                          throws GroupNotFoundException,
OperationFailedException

Description copied from interface: RemoteDirectory

Adds or updates a group's attributes with the new Map of attribute values in the directory specified by the passed in directoryId.

The attributes map represents new or updated attributes and does not replace existing attributes unless the key of an attribute matches the key of an existing

Attributes with values of empty sets are not added (these attributes are effectively removed).

Specified by:

storeGroupAttributes in interface RemoteDirectory

Parameters:

groupName - name of group to update.

attributes - new or updated attributes (attributes that don't need changing should not appear in this Map).

Throws:

GroupNotFoundException - group with supplied groupName does not exist.

OperationFailedException - underlying directory implementation failed to execute the operation.

removeGroupAttributes

public void removeGroupAttributes(String groupName,
 String attributeName)
                           throws GroupNotFoundException,
OperationFailedException

Description copied from interface: RemoteDirectory

Removes all the values for a single attribute key for a group.

Specified by:

removeGroupAttributes in interface RemoteDirectory

Parameters:

groupName - name of the group to update.

attributeName - name of attribute to remove.

Throws:

GroupNotFoundException - group with supplied groupName does not exist.

OperationFailedException - underlying directory implementation failed to execute the operation.

removeGroup

public void removeGroup(String name)
                 throws GroupNotFoundException,
ReadOnlyGroupException,
OperationFailedException

Description copied from interface: RemoteDirectory

Removes the group that matches the supplied name.

Specified by:

removeGroup in interface RemoteDirectory

Parameters:

name - The name of the group.

Throws:

GroupNotFoundException - The group does not exist.

ReadOnlyGroupException - if the group is read-only and not allowed to be deleted.

OperationFailedException - underlying directory implementation failed to execute the operation.

searchGroups

@Nonnull
public <T> List<T> searchGroups(EntityQuery<T> query)
                         throws OperationFailedException

Description copied from interface: RemoteDirectory

Searches for groups that match the supplied query criteria.

The groups will be returned in a stable order including across pagination boundaries (excluding modification).

Specified by:

searchGroups in interface RemoteDirectory

Parameters:

query - EntityQuery for Entity.GROUP.

Returns:

List<Group> or List<String> of groups/groupnames matching the search criteria. An empty List will be returned if no groups matching the criteria are found.

Throws:

OperationFailedException - if the underlying directory implementation failed to execute the operation

isUserDirectGroupMember

public boolean isUserDirectGroupMember(String username,
 String groupName)
                                throws OperationFailedException

Description copied from interface: RemoteDirectory

Determines if a user is a direct member of a group. The directory is NOT expected to resolve any transitive group relationships.

Specified by:

isUserDirectGroupMember in interface RemoteDirectory

Parameters:

username - name of user.

groupName - name of group.

Returns:

true iff the user is a direct member of the group.

Throws:

OperationFailedException - underlying directory implementation failed to execute the operation.

isGroupDirectGroupMember

public boolean isGroupDirectGroupMember(String childGroup,
 String parentGroup)
                                 throws OperationFailedException

Description copied from interface: RemoteDirectory

Determines if a group is a direct member of another group. The directory is NOT expected to resolve any transitive group relationships.

Specified by:

isGroupDirectGroupMember in interface RemoteDirectory

Parameters:

childGroup - name of child group.

parentGroup - name of parent group.

Returns:

true iff the childGroup is a direct member of the parentGroup.

Throws:

OperationFailedException - underlying directory implementation failed to execute the operation.

countDirectMembersOfGroup

@Nonnull
public BoundedCount countDirectMembersOfGroup(String groupName,
 int querySizeHint)
                                       throws OperationFailedException

Description copied from interface: RemoteDirectory

Count the direct members of a group in the remote directory. You may hint at the number of memberships that you would like to see for the purposes of efficiency but the hint may be ignored.

Specified by:

countDirectMembersOfGroup in interface RemoteDirectory

Parameters:

groupName - the name of the group to search for

querySizeHint - hinting at the maximum number of memberships that should be counted. The directory that implements this may choose to count less or more. This is a user provided suggestion for potential efficiency.

Returns:

A bounded count of the number of memberships in the given group for the provided directory. If the group is not found then there are exactly 0 members of that non-existent group.

Throws:

OperationFailedException - if we failed to count the number of memberships for the provided group.

addUserToGroup

public void addUserToGroup(String username,
 String groupName)
                    throws GroupNotFoundException,
UserNotFoundException,
ReadOnlyGroupException,
OperationFailedException,
MembershipAlreadyExistsException

Description copied from interface: RemoteDirectory

Adds a user as a member of a group. This means that all user members of childGroup will appear as members of parentGroup to querying applications.

Specified by:

addUserToGroup in interface RemoteDirectory

Parameters:

username - The user that will become a member of groupName

groupName - The group that will gain a new member.

Throws:

GroupNotFoundException - If the group cannot be found.

UserNotFoundException - If the user cannot be found.

ReadOnlyGroupException - If the group is read-only

OperationFailedException - underlying directory implementation failed to execute the operation.

MembershipAlreadyExistsException - if the user is already a member of the group

addGroupToGroup

public void addGroupToGroup(String childGroup,
 String parentGroup)
                     throws GroupNotFoundException,
InvalidMembershipException,
ReadOnlyGroupException,
OperationFailedException,
MembershipAlreadyExistsException

Description copied from interface: RemoteDirectory

Adds a group as a member of a parent group.

Specified by:

addGroupToGroup in interface RemoteDirectory

Parameters:

childGroup - The group that will become a member of parentGroup

parentGroup - The group that will gain a new member

Throws:

GroupNotFoundException - One or both of the groups cannot be found.

InvalidMembershipException - if the childGroup and parentGroup exist but are of different GroupTypes.

ReadOnlyGroupException - if either of the groups are read-only

OperationFailedException - underlying directory implementation failed to execute the operation.

MembershipAlreadyExistsException - if the child group is already a child of the parent group

removeUserFromGroup

public void removeUserFromGroup(String username,
 String groupName)
                         throws GroupNotFoundException,
UserNotFoundException,
MembershipNotFoundException,
ReadOnlyGroupException,
OperationFailedException

Description copied from interface: RemoteDirectory

Removes a user as a member of a group.

Specified by:

removeUserFromGroup in interface RemoteDirectory

Parameters:

username - The user that will be removed from parentGroup

groupName - The group that will lose the member.

Throws:

GroupNotFoundException - If the group cannot be found.

UserNotFoundException - If the user cannot be found.

MembershipNotFoundException - if the user is not a direct member of the group.

ReadOnlyGroupException - if the group is read-only

OperationFailedException - underlying directory implementation failed to execute the operation.

removeGroupFromGroup

public void removeGroupFromGroup(String childGroup,
 String parentGroup)
                          throws GroupNotFoundException,
InvalidMembershipException,
MembershipNotFoundException,
ReadOnlyGroupException,
OperationFailedException

Description copied from interface: RemoteDirectory

Removes a group as a member of a parent group.

Specified by:

removeGroupFromGroup in interface RemoteDirectory

Parameters:

childGroup - The group that will be removed from parentGroup

parentGroup - The group that will lose the member.

Throws:

GroupNotFoundException - One or both of the groups cannot be found.

InvalidMembershipException - if the childGroup and parentGroup exist but are of different GroupTypes.

MembershipNotFoundException - if the childGroup is not a direct member of the parentGroup.

ReadOnlyGroupException - if the groups are read-only

OperationFailedException - underlying directory implementation failed to execute the operation.

searchGroupRelationships

@Nonnull
public <T> List<T> searchGroupRelationships(MembershipQuery<T> query)
                                     throws OperationFailedException

Description copied from interface: RemoteDirectory

Searches for membership information.

Specified by:

searchGroupRelationships in interface RemoteDirectory

Parameters:

query - query for memberships.

Returns:

a List of Users or Groups or Strings depending on the query criteria. An empty List if there are no results. Results are ordered by entity name, case-insensitive.

Throws:

OperationFailedException - underlying directory implementation failed to execute the operation.

testConnection

public void testConnection()
                    throws OperationFailedException

Description copied from interface: RemoteDirectory

Test if a connection to the directory server can be established. When executed for a directory already persisted in the database (ie with a non-null id) the connection will be taken using the same semantics as during regular directory operations, which means that the connection may be sourced from a connection pool and be subject to additional validation if applicable. This gives a good indicator as to the RemoteDirectory's status but can be problematic when used to verify correctness during a directory update. If absolute certainty about the RemoteDirectory's status is not needed or the RemoteDirectory's lifecycle will be limited strictly to the connection test, CrowdDirectoryService.testConnection(Directory) should be used instead.

Specified by:

testConnection in interface RemoteDirectory

Throws:

OperationFailedException - underlying directory implementation failed to execute the operation.

supportsInactiveAccounts

public boolean supportsInactiveAccounts()

Description copied from interface: RemoteDirectory

Return true if this directory supports inactive users and groups.

Specified by:

supportsInactiveAccounts in interface RemoteDirectory

Returns:

true if the directory supports inactive users and groups

supportsNestedGroups

public boolean supportsNestedGroups()

Description copied from interface: RemoteDirectory

Allows us to only display nested-group related UI for directories that support it.

Specified by:

supportsNestedGroups in interface RemoteDirectory

Returns:

true if the directory can handle having a group added to a group.

supportsPasswordExpiration

public boolean supportsPasswordExpiration()

Description copied from interface: RemoteDirectory

Return true if this directory supports manually expiring passwords.

Specified by:

supportsPasswordExpiration in interface RemoteDirectory

Returns:

true if this directory supports manually expiring passwords

supportsSettingEncryptedCredential

public boolean supportsSettingEncryptedCredential()

Description copied from interface: RemoteDirectory

If this method returns true, then calling RemoteDirectory.updateUserCredential(String, PasswordCredential) or RemoteDirectory.addUser(com.atlassian.crowd.model.user.UserTemplate, com.atlassian.crowd.embedded.api.PasswordCredential) with a PasswordCredential instance where PasswordCredential.isEncryptedCredential() returns true and the instance is not equal to PasswordCredential.NONE will succeed; otherwise, it will fail.

Specified by:

supportsSettingEncryptedCredential in interface RemoteDirectory

Returns:

true if this directory supports setting passwords by hash

isRolesDisabled

public boolean isRolesDisabled()

Description copied from interface: RemoteDirectory

Expose whether the directory has roles disabled. Always true.

Specified by:

isRolesDisabled in interface RemoteDirectory

Returns:

true

getMemberships

@Nonnull
public Iterable<Membership> getMemberships()
                                    throws OperationFailedException

Description copied from interface: RemoteDirectory

Get an iterable view of the available group memberships. This may be implemented as a single remote call or separate calls, depending on the directory.

If there is a failure in the underlying retrieval, the iterator may throw Membership.MembershipIterationException at runtime.

If the directory does not have a bulk call interface then a typical implementation would be:

 
 return new DirectoryMembershipsIterable(this);
 
 

Specified by:

getMemberships in interface RemoteDirectory

Returns:

an iterable view of the available group memberships

Throws:

OperationFailedException - if the underlying directory implementation failed to execute the operation

getAuthoritativeDirectory

@Nonnull
public RemoteDirectory getAuthoritativeDirectory()

Specified by:

getAuthoritativeDirectory in interface RemoteDirectory

Returns:

the directory that is the authoritative source of data for this directory, possibly itself.

expireAllPasswords

public void expireAllPasswords()
                        throws OperationFailedException

Description copied from interface: RemoteDirectory

Sets the UserConstants.REQUIRES_PASSWORD_CHANGE attribute to true for all users in the directory using bulk operations

Specified by:

expireAllPasswords in interface RemoteDirectory

Throws:

OperationFailedException

getUserAvatarByName

@Nullable
public AvatarReference getUserAvatarByName(String username,
 int sizeHint)

Description copied from interface: RemoteDirectory

Return an avatar, if available, for the named user.

Specified by:

getUserAvatarByName in interface RemoteDirectory

sizeHint - a hint in pixels for the context in which this will be used

Returns:

an avatar, or null if none is available

getLocallyFilteredGroupNames

public Optional<Set<String>> getLocallyFilteredGroupNames()

Description copied from interface: RemoteDirectory

Returns locally filtered group names.

Locally filtered groups are groups filtered on Crowd side, in opposite to groups filtered externally, i.e. using LDAP filter. Group names are case insensitive.

Note: Nested group memberships will not be resolved for the groups by this method.

Specified by:

getLocallyFilteredGroupNames in interface RemoteDirectory

Returns:

Optional.empty() when local group filtering is disabled, otherwise return set of group names to filter.

isGroupFilteringEnabled

public boolean isGroupFilteringEnabled()

getGroupsNamesToFilter

public Set<String> getGroupsNamesToFilter()

getFilteredGroups

public List<GroupWithAttributes> getFilteredGroups()
                                            throws OperationFailedException

Throws:

OperationFailedException

performUsersDeltaQuery

public DeltaQueryResult<UserWithAttributes> performUsersDeltaQuery()
                                                            throws OperationFailedException

Throws:

OperationFailedException

performGroupsDeltaQuery

public DeltaQueryResult<GroupWithMembershipChanges> performGroupsDeltaQuery()
                                                                     throws OperationFailedException

Throws:

OperationFailedException

fetchGroupChanges

public DeltaQueryResult<GroupWithMembershipChanges> fetchGroupChanges(String syncToken)
                                                               throws OperationFailedException

Throws:

OperationFailedException

fetchUserChanges

public DeltaQueryResult<UserWithAttributes> fetchUserChanges(String syncToken)
                                                      throws OperationFailedException

Throws:

OperationFailedException

supportsDeltaQueryApi

public boolean supportsDeltaQueryApi()

createMembershipHelper

public AzureMembershipHelper createMembershipHelper()

getRestClient

public AzureAdRestClient getRestClient()

getTranslator

public MicrosoftGraphQueryTranslator getTranslator()

isLocalGroupsEnabled

public boolean isLocalGroupsEnabled()

getAlternativeUsernameAttribute

public String getAlternativeUsernameAttribute()

Returns name of the attribute that user name should be mapped to for external users.