Can I Enforce two-step verification for Jira without using Atlassian Access

Question

I have Jira Software and would like to enforce two-step verification without using Atlassian access. Also I don't  want this to be controlled by the user himself through his profile.

The need is to be controlled only by admin to enable this feature or disable it!

Jorden Van Bogaert · Answer

Hi @Aya AlJboor

Sorry, I had missed the part "without Access".

Unfortunately however, it's not possible to enforce it without Atlassian Access. Users can freely enable 2FA without having to pay for it, but once you want to enforce it on them, you'll need Access to do that for you.

In this community post, at the bottom, you can find a comment from Simon talking about how he was able to list all users in his domain without 2FA enabled and without actually paying for Access. It's only a workaround and you will still need to enforce 2FA manually (for example by revoking their license if they don't enable 2FA).

If you really need automatically enforced 2FA, I'm afraid Atlassian Access is the only possible approach. I understand that Access requires some budget, but for all the additional security features, it makes sense.

If price is really an issue, you can also reach out to Solution Partners, some partners offer discounts at their own discretion.

Kind regards

Jorden

Aya AlJboor · Answer

Thanks @Jorden Van Bogaert  for your answer

I have read this article before posting my question but my concern is regarding this statement "However, as an organization admin, if you'd like to require all your users to enable two-step verification, you'll need an Atlassian Access subscription"

I need another way to enforce it by admin without using Atlassian Access or any workaround because our organization hasn't set a budget for atlassian access yet and we have an audit note in this regard.

Jorden Van Bogaert · Answer

Hi @Aya AlJboor

Atlassian has an article about enforcing 2FA. You can read all about the details in Enforce two-step verification

Hope this helps.
Kind regards
Jorden