How to access JIRA Server API with MFA for 3rd-party app

Question

Hello,

I'm developing an integration with JIRA. Users provide URL+credentials, then integration uses a Basic Auth to access REST API. It works fine in many cases.

But MFA shows up. For JIRA Cloud users can use API token, so it is not a problem for them to continue to use the integration.

But what JIRA Server (self-hosted) users should do?

I don't have an access to my users' JIRA, so I can't create an Application Link for OAuth. Users can't do it too, since they don't have permissions.

I also checked several answers here and I understand that:

Jira Server does not provide those specific types of API tokens that can be used in basic auth, like Jira Cloud does

But still I wondering is there a way for my users to provide an access for my integration even though MFA presents?

Ankit_5decvz · Answer

Hi @Denis ,

Can you please let me know which app are you using to enable MFA? We provide a REST API Authentication app for Jira, which generates an API token for Jira users. You can make the REST API call using username and token generated by the app and that will bypass MFA or basic auth. Feel free to reach out to us at atlassiansupport@xecurify.com and we can discuss further on this use case.

Thanks,

Ankit Ahuja

miniOrange

Jon Espen Ingvaldsen Kantega SSO · Answer

Hi @Denis

Which MFA solution do you use in your Jira?

I work for Kantega SSO, and with our app you can setup MFA through any SAML 2.0 identity provider. In the settings, you can specify to enforce SSO authentication for the users, but still allow BasicAuth requests to pass. See attached screenshot:

Does our solution solve your case? Happy for your feedback here.

Have a nice day!
-Jon Espen
Kantega SSO