JSM email connection and two-factor authentication

[Valli]

Hi Atlassian Community,

I am trying to connect a mailbox to a JSM project.

The mailbox has a two-factor authentication which they do not allow to be excluded.

Would you be able to guide me how I can connect the mailbox without excluding it from MFA?

[Nic Brough -Adaptavist- · Accepted solution]

Welcome to the Atlassian Community!

You will need to exclude it from MFA (assuming it is an Exchange email inbox) - there's no way a service account can log in without doing MFA, and there's no sane way to give a service account the factors it needs to do MFA.

[Valli]

Thank you Nic!

Apparently this can be managed by App passwords for two-step verification. But that option is not necessarily allowed by the sys admins.

[Nic Brough -Adaptavist-]

I'm afraid you have no choice - your admins need to allow that route.

[Adrien RESTAUT]

Hello @Valli ,
I tried to setup an App password for a non shared mailbox, and could not find a way to authenticate a microsoft email account in "Email requests" of JSM project. I can't find where to enter the created App password, and entering it at microsoft authentication popup fails (it expects the real account pass, not the app pass I generated).

If anyone can post how to use MS external email in JSM, that will be mandatory around 15th of October when MS enforces MFA for all accounts.
Regards,

[Bastien Perez]

Everything is documented here (part Microsoft OAuth):

https://support.atlassian.com/jira-cloud-administration/docs/create-issues-and-comments-from-email/

Please note that App Password is no longer available for retrieving email via POP/IMAP since the Basic Authentication deprecation (2022).

[Adrien RESTAUT]

Hello Bastien,

Thank you for your input. I thought this parameter wouldn't interact with "Email requests" but I tested still.

And to my good relief, the "Email requests" continues to proceed the received emails even after I enforced the MFA for the concerned mailbox.

Thank you, I believe configuring Microsoft OAuth is good solution for using MFA mailbox in Jira!

Regards.