Regarding the Two-Step Security Requirement for a Shared Account

[이진섭]

Hello,
My name is Sup from LX Semicon, and we use Atlassian accounts.
For the past few years, we have been communicating with our contracted IP vendors through JIRA.
We have been using the account “lxsddr@lxsemicon.com” for this communication. This account is a company-registered shared account used by 4–5 team members for security reasons.
However, recently we encountered an issue where we could not log in to this account due to a two-step security request.
If the account is tied to a single person, the remaining members will not be able to use it. Is there any solution to this?
Thank you.

[Tomislav Tobijas]

Hi @이진섭 ,

My two cents on this is to potentially connect this account with some shared mailbox or email that forwards emails to all users who are using that account, so the code will be received by everyone. I've seen one or two setups like this.

However, this might be a breach of Atlassian's terms and conditions - more on that here: Make Atlassian's global account model work for you 

Cheers,
Tobi

[Matteo Vecchiato]

Hi @이진섭 ,

Thank you for your post. 

I guess it has been activated a security policy in your organization through Atlassian Guard, with a two-step authentication for managed users.

It is possible to create a secondary security policy, without the 2-step autenthication, and set it to such members with "special" conditions.

You can find documentation about it here:

https://support.atlassian.com/security-and-access-policies/docs/understand-atlassian-guard/ 

https://support.atlassian.com/security-and-access-policies/docs/enforce-two-step-verification/ 

https://support.atlassian.com/atlassian-account/docs/manage-two-step-verification-for-your-atlassian-account/ 

Hope it helps