Manually create Sonarqube user for Active Directory user

[horkin (Wan Hor Kin)]

• SonarQube Server Community Edition version 25.3.0.104237
• SonarQube Scanner 3.1.0.1141
• SonarQube Server deployed in Docker
• SonarQube Scanner 3.1.0.1141 in Jenkins in Docker

Currently, I set sonar.authenticator.createUsers=true in sonar.properties. Any Active Directory user login first time to Sonarqube portal, will automatically be created in Sonarqube user list. And I need to assign permission for the user.

1. When sonar.authenticator.createUsers=false, I tried to create manually a user in Sonarqube portal same name as Active Directory user, but Sonarqube couldn’t recognize it as Active Directory user but a local user. How to make it recognize ?

2. Would it works if I create a group in Sonarqube user group same name as Active Directory group, any Active Directory inherits the group permissions ?

[Colin]

Hey there.

@horkin

• When sonar.authenticator.createUsers=false, I tried to create manually a user in Sonarqube portal same name as Active Directory user, but Sonarqube couldn’t recognize it as Active Directory user but a local user. How to make it recognize ?

You’ll need to use the API to migrate users from the local identity provider to LDAP.

Migrating SonarQube Users Between Identity Providers (with a focus on LDAP → SAML)

Introduction SonarQube allows delegating authentication to several Identity Providers (LDAP, SAML, GitHub, GitLab, etc.). However, after some time, a SonarQube administrator may need to change the Identity Provider that their users authenticate with. In particular, there are many organizations making the switch from LDAP Authentication to SAML Authentication for their applications. This guide aims to make it clear how to migrate those users from one Identity Provider to another, focusing on the…

@horkin

2. Would it works if I create a group in Sonarqube user group same name as Active Directory group, any Active Directory inherits the group permissions ?

If group mapping is working well, this is our recommended approach instead of pre-provisioning users and assigning permissions before their first login. AD Groups tend to last longer at companies than many employees!