nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

2FA / MFA

Christian Purnomo

Hi All

We currently have a cloud Hosted Jira / Confluence that we wish to enforce to use MFA/2FA.

The situation is that our Jira and Confluence have a mixed between internal and external users.
Internal users are from within our Active Directory / Azure Active Directory and Externals are outside our AD domain.

IDEALLY we would prefer to leverage our existing Azure AD with MFA built in. This is going to work for our Internal users but how about our external users MFA?

Is it possible to have Jira / Confluence to have mix MFA policies, ie internal users to use Azure AD and external users to use Google Authenticator?

Thanks!

Accepted answers

Pramodh M

Hi @Christian Purnomo

Welcome to the Community!!

You need to claim domains of accounts if you need to enforce the 2FA option.

Here I guess you can only claim your internal accounts and not the external ones

Only one SSO is supported when you set up configuration with Atlassian Access and only claimed accounts follow the SSO Login and has the authentication policies

Please have a trial of Atlassian Access and explore o available options here

https://admin.atlassian.com/atlassian-access

Let me know if you have any queries

Thanks

All comments

Pramodh M

Hi @Christian Purnomo

Welcome to the Community!!

You need to claim domains of accounts if you need to enforce the 2FA option.

Here I guess you can only claim your internal accounts and not the external ones

Only one SSO is supported when you set up configuration with Atlassian Access and only claimed accounts follow the SSO Login and has the authentication policies

Please have a trial of Atlassian Access and explore o available options here

https://admin.atlassian.com/atlassian-access

Let me know if you have any queries

Thanks

Christian Purnomo

Thanks @Pramodh M

Yes you are right, we won't have any issue with claiming our internal domains.

> Only one SSO is supported when you set up configuration with Atlassian Access and only claimed accounts follow the SSO Login and has the authentication policies

Would you be able to verify?:
- Only one SSO is ok, we are only after SSO for our internal users. I am assuming our internal users will be enforced with MFA via Azure AD.
- Our external users dont't need SSO - we would only like to enforce them to use Google Authenticator. Is this a possible mix with the SSO above for internal users?

Thank you

Pramodh M

For external users, you won't be able to set the Google authenticator as only one SSO is supported, you will not be able to set up another one.

Rest assured for internal users, it will work as your requirement

Here's a guide

https://community.atlassian.com/t5/Atlassian-Access-articles/How-To-Atlassian-Access-Enable-amp-Disable-Two-Factor/ba-p/1944420

Christian Purnomo

@Pramodh M ok thanks.

Getting MFA for ALL USERS (internal & external) is MANDATORY.

I guess our only option is NOT to use SSO and stick with one of the available MFA (Ie Google Authenticator / Duo / etc).

Welcome!

It looks like you're new here. Sign in or register to get started.

Quick Links

Find more posts tagged with

jira

cloud

jira-cloud

2-factor-authentication