Limiting possiblity of loging to Jira from the outside network.

Question

I would like to know if there is any soultion that would allow mo to select a group of users that would only had the right to log on to Jira locally. Our jira is aviable oustide our local network but not all users should be able to login form home or any other place diffrenet than our company office. I know that such a feature is not aviable in Jira but maybe you know of some solution that would allow us to set up our system this way. I know we can set it on our server but we would like the solution to work in a specific way:

1. We would create a group in jira "Local Only"

2. Each user that would be put into this grupu could only access Jira localy.

Is such a thing even possible?

Nic Brough -Adaptavist- · Answer

It's not impossible, just not particularly easy to do in Jira because you'll need to code something that lets Jira understand whether a connection is from inside or outside and disallow connections based on group membership (the group bit is the easy part from memory).

On a cosmetic point - Jira won't actually know to exclude users until they'd attempted login, which doesn't feel right to me - "hi, you could log in if you were in the office, but you're not, so I'm not letting you in".  It's better to block them before they reach a login prompt for Jira.

Jacek Fajfer · Answer

I know this can't be achived via Jira and must be set on the server but the problem is that we have 400 users and 300 of them should have acces to our system from outside the local network. That means we would have to create 300 accounts in whatever solution we use. So we were wondering if it can be done the other way around, to filter only users that shoulnd't have acces to Jira from outside the local network, it would be the best if I could for example just put peaople in group "only local" and that's it;) But I suspect such a solution would be very hard to implement, or even impossible.

Nic Brough -Adaptavist- · Answer

I wouldn't even think of trying this in Jira - you'd need to add code to make the login/authentication stuff aware of the source of the request.

If you've got a web-server in front of Jira, like Apache, that's the sort of thing it's suited for.  If no webserver, that's fine, but I'd look at the firewall as Renjith says.