Do the Jira Server and Confluence Server Mobile Apps fully support SSO with Okta?

Question

I've been told that, at least previously, the Confluence Server Mobile App would bypass Okta and log the user in directly using the username and password. Has this been fixed in the Confluence Server app, and how does this work with the Jira Server app?

Obviously this vulnerability meant these apps were scrapped from the table, and won't be considered again until the auth is properly secure and meets our internal standards.

Thanks

Jon Espen Ingvaldsen Kantega SSO · Answer

Hi @stringsonfire

Yes, you are right. The 2FA part taken care of by the identity provider (Okta in your case). As long as you have and Okta integration up running, you should get 2FA on mobile as well.

When applying 2FA, you should also make sure that Okta login is enforced for all users and that traditional username / password login is disabled. Not all SSO solutions allow you to disable such on the Jira / Confluence side.

Cheers,
Jon Espen
Kantega SSO

stringsonfire · Answer

I'm not sure what part of that page to be looking at, but I've read it before. To clarify, 2FA is a service that Okta provides, I'm not expecting that of the mobile apps. I just need the apps to work with Okta SSO, just like web Jira and Confluence

JP _AC Bielefeld Leader_ · Answer

HI,

no 2FA support that I know off:

https://confluence.atlassian.com/doc/confluence-mobile-284365706.html

Best

JP