Hello,
I would like to share a concern about portal-only customers users ticket opening.
We had set up the link where external users, without a license, could create an account to open tickets on Jira Cloud.
If that URL is shared, intentionally or not, for other people that shouldn't have access to our portal, they would be able to create an account and start opening tickets that are unwanted or unnecessary.
Also, that could happen with the email ticket opening, if the mailbox configured to Jira
Cloud starts receiving multiple messages from unauthorized sources.
Is there any control or good practice that we should look for to prevent these scenarios?
Thank you.
Victor
Hi Victor,
Welcome to Atlassian Community!
Currently, when we enable public signup, it's not possible to restrict only trusted domains, so anyone will be able to create an account.
When this happens, for this customer to do not spam your service desk, you can inactivate their accounts (not delete) because once it's inactive, Jira won't accept new tickets. If you delete the account, they will be able to create the account again and create tickets.
We have a feature request suggesting the implementation of the ability to include a domain-level restriction for public signup:
- https://jira.atlassian.com/browse/JSDCLOUD-868
Please, click on vote and watch to receive updates about the feature.
Regards,
Angélica
Thank you Angélica! I will do that. :)
Victor
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.