Group Synchronization Not Working After Upgrade to Version 2025.1LTA

  • which versions are you using : Sonarqube enterprise edition 2025.1LTA
  • how is SonarQube deployed: zip
  • what are you trying to achieve: Group synchronization
  • what have you tried so far to achieve this:
    Recently, we upgraded SonarQube from version 10.8 to 2025.1LTA. The current version requires an update to the SAML configuration. We successfully configured SAML login through Microsoft Azure and can now log in to SonarQube. However, group synchronization is not supported because our SonarQube server is only accessible within the corporate network and is not hosted online.
    We tried following the steps in the SonarSource documentation
    Multiple built-in methods for authentication,
    but since our server is not hosted online, we were unable to follow those steps.

Tried enabling SCIM provisioning provided the Tenant URL and secret token
but getting this error

Is there any ways to perform group synchronization in v2025.1LTA .
Thank you.

Regards,
Shivashree

Hi Shivashree,

What error do you get, and on which side?

Have you created the groups manually on the SonarQube side?

 
Thx,
Ann

Hello Ann ,
To answer your question Have you created the groups manually on the SonarQube side? Yes, we are creating groups manually.
Since we were using Microsoft login that was supporting group provisioning through Microsoft azure

But now version 2025.1 LTA it is mentioned SonarQube Server base URL must be a public URL. But SonarQube server is only accessible within the corporate network and is not hosted online. what could be the possible solution can be implemented.

Hi,

Yes, sorry. That’s the case.

 
Ann

Just to clear things up a bit:

  • The Server Base URL must be a public URL if you expect to integrate with external systems which will need to reach your SonarQube server. This is the case with, for example, SCIM.
  • In other instances, it’s perfectly valid for the Server Base URL to be a private URL (only accessible on your own network)
  • You might be able to have the best of both worlds using something like Entra provisioning agents.