Is there a way to make Jira and Confluence 2FA?

[Mark Tellier]

I will be using Jira both internally and externally through SSL. Is there a way to make the external access 2FA? While leaving the internal access with normal access?

[Sloan]

Hi @Mark Tellier

There are a few add-ons to archive 2FA in Confluence and Jira: https://marketplace.atlassian.com/search?query=2FA 

I worked quite a few time with the add-on by syracom AG. It allows for token generators like google Authenticator or Authy. You need two 2FA tokens though, one for Jira and Confluence each.

Cheers
Niklas

[Alexis Robert]

Hello, 

I know that Duo Security provides 2FA for Jira and Confluence, you might to have a look at their offer.

Usually you can create groups with different security settings on these platforms.

Cheers, 

--Alexis

[Oliver Scott]

Hello there,

Please correct me if I am wrong.

You want to implement 2FA for your Jira & Confluence server only when the user is trying to access server externally ie. from outside of your network.

Also, the login behavior should work as previously when user access servers from internally ie. from your internal network.

If this is your case then you achieve this by using the Whitelisting IP feature.

This feature allows you to skip or ignore 2FA when login request is raised from the configured IP address.

Here you can add your internal networks IP address as Whitelist IP address. So if login request is from one of these IPs then it will not ask for 2FA. But if IP is not from the Whitelisted IP address then it will ask for 2FA.

For this, you can refer the below link using which you can solve this problem

Jira 2FA/MFA:- https://marketplace.atlassian.com/apps/1221260/two-factor-authentication-2fa-for-jira?hosting=datacenter&tab=overview

Confluence 2FA/MFA:- https://marketplace.atlassian.com/apps/1221328/two-factor-authentication-2fa-confluence?hosting=datacenter&tab=overview

You can also raised query here to get the help from the support.

[Lars Olav Velle _Polar SSO_]

Hi @Mark Tellier 

A few days ago we (Polarnight) published our Polar SSO plugins to the Atlassian Marketplace.

Built into the app you get SAML & Kerberos SSO, in addition to multifactor authentication/verification using both FIDO and TOTP codes. 

Multifactor are controlled by a highly flexible policy framework that allow you to define who should be encouraged or required to use extra verification.

You can also log in directly without password using fingerprint, face recognition, USB security keys.

Enjoy,

Lars