How to enable MultiFactor Authentication for Jira Server?

Question

I want to integrate Jira Server (OnPremise) with Gitlab (cloud). Now to implement this integration we need to open Jira to public. To minimize the security risk, we would like to enable the dual MultiFactor Authentication (have users inputs security code besides the username password we use via Active Directory)

How to enable dual MultiFactor Authentication for Jira OnPremise and Confluence OnPremise?

Please suggest.

I think this feature is not available out of box within Jira, correct?

Is there any recommended add-on ? Should work with Jira server and confluence server.

Pravin Patil_60gmdd · Answer

Thank you for your response.

We might be going ahead with SecSign add-on.

Lokesh Naktode_miniOrange · Answer

Hi @Pravin Patil ,

You can use the miniOrange's JIRA OAuth/OpenID client app and Confluence OAuth/OpenID app from the Atlassian Marketplace to connect JIRA and Confluence to Gitlab for Single Sign-on.

Also, you can enable 2FA on top of SSO in Gitlab, Steps are given below.

https://docs.gitlab.com/ee/user/profile/account/two_factor_authentication.html

I work for miniOrange and in case if you need further assistance with the plugin and Gitlab configuration, you can reach out to miniOrange at atlassiansupport@miniorange.com or through the customer portal

Thanks,

Lokesh

Jon Espen Ingvaldsen Kantega SSO · Answer

You get setup Gitlab login to Jira and Confluence server through the OpenId-Connect (OIDC) protocol and third party OIDC app in Atlassian Marketplace.

It is the responsibility of the Identity provider (in your case GitLab) to do MFA. When MFA is enables, you should also make sure that the marketplace app disables traditional username/password backdoors to Jira / Confluence.

I work for Kantega SSO, and we are awaiting the final approval from Atlassian to launch our OIDC app on the marketplace. If you send me an email (to atlassian.support@kantega.no), I am happy to give you early access to this product.

Regards,
Jon Espen