We are developing a web tool which uses Jira Service Desk Cloud and Confluence Cloud to provide support. This web tool uses single sign on, so only client users can access the web tool and the link to the support sites. We are concerned with protecting security and IP while still making it easy for users to access support.
I know it is possible to lock down permissions on Jira and Confluence so that only specific users have access and/or they have to create an account before they can log tickets/read knowledge base articles. We would prefer NOT to do this in order to make it as easy as possible for users. There are also going to be thousands of users and we do not want to provide individual access for each user.
But if we have the settings for Jira/Confluence set as "anyone can view", we are aware that our knowledge base articles and links to our Jira/Confluence sites may show up in search engine results like google. This is an IP risk for us and a potential security risk as well.
Ideally it would be great if the link to the support sites would only open if you were redirected from our web tool. Is this at all possible?
Any advice on how to set up the support sites for ease of access while also maintaining security would be much appreciated.
Hi Andrea,
This is not currently possible. If you enable "anyone can view" then anyone will be able to see the instance. I would recommend for security's sake that you only allow users with an account on the instance to login.
We have two feature requests below to modify robots.txt (to block search engines) or to block it by default:
Secondly, we have a feature request for users to be able to whitelist which IPs can access their Cloud instances:
This wouldn't prevent users accessing your site via another site to view your instance, but rather, require that they are in a certain location or a certain network to be able to do so.
Let me know if you have any questions.
Regards,
Shannon
Online forums and learning are now in one easy-to-use experience.
By continuing, you accept the updated Community Terms of Use and acknowledge the Privacy Policy. Your public name, photo, and achievements may be publicly visible and available in search engines.
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.