Does Atlassian Access provide 2FA for JSD Cloud Customers?

[David Sokolowski]

Hello

A banking client wants to require 2FA for all users of their JSD Cloud instance, including non-licensed customers making requests via the JSD portal. As those customers don't have JSD accounts, it is not clear whether required 2-Factor Authentication can be turned on for them via Atlassian Access.

Can Atlassian Access be used to require 2FA for non-licensed JSD Cloud customers?

Thanks!

[David Sokolowski · Accepted solution]

Here is the response from Atlassian:

For Jira ServiceDesk Cloud Portal-only users that are not using their Atlassian Account to authenticate, it is not possible to apply Atlassian 2FA against those users.

The distinction is a little bit difficult to define.

• Users that sign up as Portal Only accounts directly into the Service Desk portal and provide a new password there will have an instance-specific user and password. 2FA cannot be applied to this kind of account.
• Users that are invited to an instance that already have an Atlassian Account, can use their Atlassian Account to log in as a portal-only user. This login using the Atlassian Account can be protected by 2FA.
• Users that are specifically invited as normal "licensed" users, will be guaranteed to use Atlassian Accounts. Their Licensed access can be removed, while preserving portal access. They can be covered by 2FA.

You can find more details on the distinction between the instance-specific portal-only users, and users that are tied to an Atlassian Account here:
Manage Jira Service Desk customer accounts

[Brant Schroeder]

Yes, you can learn more here: https://confluence.atlassian.com/cloud/secure-your-account-with-two-step-verification-939505063.html and here: https://confluence.atlassian.com/cloud/enforced-two-step-verification-938859738.html

Two factor is available on the Atlassian accounts that you control.  I do not know of anyway for you to turn on 2 factor for customer accounts in the portal.  Support would be able to answer if this feature is available or not: https://support.atlassian.com/contact/#/

[David Sokolowski]

Thank you for the reply. Yes, I've reviewed those pages and there's nothing specific that says JSD customers can use 2FA. Because it's not explicit, I didn't want to assume the solution was available, then recommend it as a solution, and then have it NOT available.

Am I missing something? Is there some place it explicitly states that JSD customers (users without accounts who only interact via the portal) can use 2FA? I'm just not seeing it... 

[Brant Schroeder]

No you are not missing anything.  I was not able to find anywhere in the documentation or the setup of the service desk to turn this on.  You should reach out to support and see if it is even an option.

[Eitzaz Haider]

Hi All I am just checking this and find its looks possible through this https://support.atlassian.com/security-and-access-policies/docs/understand-atlassian-guard/