How can we enforce 2FA for Service Desk Customers?

[Olson Personal Account for Testing]

We would like to require our Customers to login securely by enforcing 2FA for the Service Desk portal. 

Is this possible to accomplish using the Atlassian Access product or is there a different method?

[Anton Storozhuk]

Hi @Olson Personal Account for Testing 

There's a Jira 2FA plugin available with U2F devices support 

https://marketplace.atlassian.com/apps/1220048/2fa-u2f-totp-secure-login-for-jira?hosting=server&tab=overview.

It has Service Desk support.

[Frederik De Roover]

@Olson Personal Account for Testing you can indeed enforce this using Atlassian Access, we've implemented this without any issues.

[Olson Personal Account for Testing]

Thanks Frederik - how do you enforce it?

[Frederik De Roover]

We've followed their guide, pretty straight forward.

1. Create an organisation
2. Verify your domain(s)
3. Subscribe to Access
4. Check the 2FA box

Our users had to setup their 2FA method, and couldn't login otherwise.

An important note is that this wasn't done using SAML accounts.

Hope this clears it up a bit.

You can read the prerequisites, to get a better understanding.

[Olson Personal Account for Testing]

Thanks Frederik. Closing for now. 

Reviewed those pages but they don't mention anything about JSD Customers (the end-users that will be using the Portal to raise issues). 

Based on this other discussion, it looks like 2FA is NOT supported for JSD Customers: https://community.atlassian.com/t5/Jira-questions/Does-Atlassian-Access-provide-2FA-for-JSD-Cloud-Customers/qaq-p/931017 

[Eitzaz Haider]

According to my understanding there is no current solution available for this and this feature is still under discussion on feature page 

[Joe Pakenham]

Adding my two cents here. I actively DON'T WANT this feature.

Having enforced MFA for Jira Software and Confluence is good, but if it were automatically extended to Jira Service Desk customers (without any other access to Jira Software or Confluence) then that would be a huge pain.

If this feature is being considered, please make it optional.