System-wide Two Factor Authentication

[Diego Barros]

Does Jira have an option to require all users to use two factor authentication?

I cannot find such a setting. All I could find is that a user can turn on 2FA for themselves. It would be beneficial for the security of a Jira instance to require all users to use 2FA.

[Ed Letifov _TechTime - New Zealand_ · Accepted solution]

Jira Cloud doesn't, but Atlassian Access (a separate Cloud product) does under Admin/<your organisation>/Security/Two-step authentication - "Enforce two-step verification"

Important note - it only applies to accounts from your verified domains.

What this means is that you can enforce 2FA only on the users you control. If you allow access to your Cloud instance to someone from an external organisation, who's domain you do not control and cannot verify - you are out of luck.

You can read more here: Enforced two-step verification