Multi-factor Authentication for group of users in Bitbucket

Question

Can you please confirm as to how can we enable/enforce a particular user group in bitbucket to enable MFA?

I could perform for single user but then it has to be done by individual user and also how can it be validated that all the required users of a particular group have enabled MFA for their accounts?

Daniil Penkin · Answer

Unfortunately team is the only level 2FA can be enforced for in Bitbucket. Projects are practically labels for repositories, they don't introduce any hierarchy of settings or permissions.

I'm afraid there's no way in Bitbucket to validate that users have 2FA configured beside this team-wide 2FA enforcement. However you might be able to set up 2FA in a third party SAML service and then use it with Bitbucket by subscribing to Atlassian Access.

Cheers,
Daniil

Monali Chaudhary · Answer

But in my case we have multiple projects under the parent team folder . I need to implement MFA only for one of the projects inside this team folder.

Th option you have suggested if enabled will force all the users across other projects also to have MFA enabled which we do not want. So is there any way we can enable this only for specific project?

Also assuming that the above is not possible, then if we manually tell specific set of users to enable MFA, then in that case how can we validate that they are using MFA to work in bitbucket?

Please note all the projects under the parent team are private.

Daniil Penkin · Answer

Hello @Monali Chaudhary,

You can configure a team to require that the users with access to private content are only able to see the content if they've enabled two-step verification. This is a Bitbucket Premium plan feature. You can check the details here.

Hope this helps. Let me know if you have any questions.

Cheers,
Daniil