Alternatives to Service Accounts?

[Eric Pozzobon]

Hello Everyone,

Has anyone found any alternatives to service accounts that work for JIRA?

1. gMSA & sMSA seem to be out of the question, or not supported, unless I am mistaken.
2. I don't see any authentication protocols that don't require a User Account and an API token.
3. We do not have an internal app to handle requests "as application".

The trouble we run into is several fold:

1. We need to create a separate profile/email for 2FA for these accounts, leading to sharing and excess visibility.
2. Passwords expiring creates a risk of integrations breaking
3. License count expands as more and more service accounts

Any ideas on how we can handle this more securely & efficiently? TIA!

[Jim Knepley - ReleaseTEAM]

I haven't needed to use it yet myself, but Jira supports OAuth 2.0.

That page seems to contradict itself, though:

"You can revoke this access token at any time from your Jira user account, otherwise, all access tokens expire after seven days."

"This access token is specific to this gadget and as long as the token resides with the gadget, your gadget will have access to your Jira data."