Forums

Articles
Create
cancel
Showing results for 
Search instead for 
Did you mean: 

Possible for Jira/Confluence links to only open when redirected from specific webpage?

Andrea Wadsworth August 30, 2018

We are developing a web tool which uses Jira Service Desk Cloud and Confluence Cloud to provide support. This web tool uses single sign on, so only client users can access the web tool and the link to the support sites. We are concerned with protecting security and IP while still making it easy for users to access support.

I know it is possible to lock down permissions on Jira and Confluence so that only specific users have access and/or they have to create an account before they can log tickets/read knowledge base articles. We would prefer NOT to do this in order to make it as easy as possible for users. There are also going to be thousands of users and we do not want to provide individual access for each user.

But if we have the settings for Jira/Confluence set as "anyone can view", we are aware that our knowledge base articles and links to our Jira/Confluence sites may show up in search engine results like google. This is an IP risk for us and a potential security risk as well. 

Ideally it would be great if the link to the support sites would only open if you were redirected from our web tool. Is this at all possible?

Any advice on how to set up the support sites for ease of access while also maintaining security would be much appreciated.

1 answer

0 votes
Shannon S
Atlassian Team
Atlassian Team members are employees working across the company in a wide variety of roles.
September 4, 2018

Hi Andrea,

This is not currently possible. If you enable "anyone can view" then anyone will be able to see the instance. I would recommend for security's sake that you only allow users with an account on the instance to login.

We have two feature requests below to modify robots.txt (to block search engines) or to block it by default:

  • CLOUD-5915 Allow users to modify their robots.txt
  • CLOUD-5685 Stop search engines from indexing Atlassian OnDemand instances by default

 

Secondly, we have a feature request for users to be able to whitelist which IPs can access their Cloud instances:

  • CLOUD-2636 Allow customers to configure IP whitelist

This wouldn't prevent users accessing your site via another site to view your instance, but rather, require that they are in a certain location or a certain network to be able to do so.

Let me know if you have any questions.

Regards,

Shannon

Suggest an answer

Log in or Sign up to answer
TAGS
AUG Leaders

Atlassian Community Events