Multi-factor Authentication

[Chad Krogstad]

To make JIRA and Confluence available to our employees outside of our firewall, we would require multi-factor authentication using a security code in addition to the users password. In particular we use VIP Access by Symantec.

Is this currently supported? Does anyone have similar constraints and solution that they are willing to share?

The power of these tools would be even greater if we could access them outside of our corporate network, which requires multi-factor authentication.

Any information is greatly appreciated!

[Pedro Cora · Accepted solution]

Chad,

VIP Access is not supported. You would have to built a custom authenticator around that. For more details, check the docs at https://developer.atlassian.com/display/CROWDDEV/Crowd+Developer+Documentation

[Chad Krogstad]

Pedro -

Thank you for your response. Just wanted to make sure we don't invest time in creating/exploring a solution that Atlassian has already solved.

If I wanted to submit this as a feature request, as I believe this maybe a need of many enterprises, what would be the best avenue?

Thank you!

[Caspar Krieger]

Pedro, we track feature requests on https://jira.atlassian.com ; the most applicable existing issue would be that for generic 2 factor authentication ( https://jira.atlassian.com/browse/CWD-677 ); please feel free to vote for and comment on that issue with your requirements (more detail is better!).

[Anton Storozhuk]

Hi @Chad Krogstad 

There's a Jira 2FA plugin available with U2F devices support 

https://marketplace.atlassian.com/apps/1220048/2fa-u2f-totp-secure-login-for-jira?hosting=server&tab=overview.

Please note that this app has Data Center edition.

There's also one more app (simplified version) - U2F for Jira

[Titus]

Check out the benefits of our new 2FA JIRA add-on for two-factor authentication using your SecSign ID.

https://marketplace.atlassian.com/plugins/com.secsign.secsignid/server/overview

For a more detailed installation tutorial visit
https://www.secsign.com/jira-2fa-tutorial/

[FP]

Please have a look at our new JIRA add-on "secure login", providing 2-factor authentication:

https://marketplace.atlassian.com/plugins/de.syracom.jira.plugins.securelogin

Kind regards,
Frank

[Tomas Zezula]

Hi Frank, Thank you. Is there any chance the add-on would support JIRA Cloud anytime soon? Kind Regards, Tomas

[Frank Polscheit]

Hi Tomas, that depends on Atlassian: currently it is not possible based on missing hook to integrate a secure login between their cloud products and the users' browsers. It would have to be installed on their servers but that's what is not provided. Using Atlassian Connect is not sufficient enough as you can by-pass requests. Kind regards, Frank

[Caspar Krieger]

It's very likely that 2FA will be part of JIRA Cloud and all other Atlassian Cloud products in the future. We know many people want it, but we also want to do it right.

[Tomas Zezula]

@Frank Polscheit : Thanks a lot for your prompt and detailed reply. @Caspar Krieger Thank you for getting in touch. The ticket to enable 2FA in JIRA has been opened for 2 years now, fingers crossed.