nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

2FA Bypassing Whitelisted IP's

Charlie Rivers-Bland

Hi,

We are currently on a Premium plan for both Jira Cloud and Service Management.

We have everything locked down to a specific "office based IP address" so any external IP's cannot access our facilities.

However i was wondering if it was possible to bypass the IP Blocklist if a user had 2FA enabled.

We have users who may be using 4G to access the JIRA app when travelling. But due to a constant change in public IP address's it would be impossible to manage. (amending the allow list every day)

Thanks,

Charlie

Accepted answers

Andy Gladstone

@Charlie Rivers-Bland I am not sure if this is still an open issue for you, but I have done some research on it.

2FA and IP Whitelisting are independent security features. Once there is an IP restriction on logins to your instance, it will reject any inbound traffic before your user can even attempt to login and reach a login in screen where 2FA would kick in.

All comments

Andy Gladstone

@Charlie Rivers-Bland I am not sure if this is still an open issue for you, but I have done some research on it.

Andy Gladstone

@Charlie Rivers-Bland If my answer helped you, please mark it accepted to help other users find it when experiencing similar challenges.

Zeljko Milovanovic

Hello @Andy Gladstone ,

we have similar issue, but question still remains: is it possible to allow mobile apps usage with IP Whitelisting in any way?

Andy Gladstone

@Zeljko Milovanovic if you enable IP Whitelisting, mobile app access will be restricted. There may be a solution if a company is using Atlassian Access where Mobile Device MAC addresses can be whitelisted, but I am not too familiar with that product to suggest or recommend.

Duane Kuroda

I think the solution for this question was suggested (and would need more votes) on the Altassian jira for RFEs --> https://jira.atlassian.com/browse/ACCESS-1360

If I summarized it correctly, the ticket was to add an option to use MFA for users not on allowlist IPs (basically the mobile user use case)

Welcome!

It looks like you're new here. Sign in or register to get started.

Quick Links

Find more posts tagged with

cloud

jira-service-desk

jira-software

jira-cloud

confluence-cloud