Can we enforce 2FA for guest users? Or even just view 2FA status?

[Caroline Hallam-Baker]

We're probably moving to Atlassian Access so we can use SSO for accounts on our verified domain.  We have some (external) guest users.  Will we be able to enforce 2FA for them?  I think the answer is 'no', in which case will we at least be able to see whether or not they have enabled 2FA?

[Utkarsh Agarwal _Nagarro_]

Hi @Caroline Hallam-Baker 

You would not be able to enforce 2FA on unmanaged/unclaimed accounts. Currently its also not possible to view the status of 2FA of such accounts. However, if you have a list of the guest accounts, you can reach out to Atlassian access cloud support team, and they should be able to confirm the 2FA status.

However, Kindly note that since these are unmanaged accounts there is no guarantee on keeping the 2FA active on such accounts. The workaround is to create an alternate account for such guest users under your claimed domain.

Regards 

Utkarsh

[Dave Meyer]

We are actively working on launching a new feature for this: https://www.atlassian.com/wac/roadmap/cloud/external-user-security-eap?search=external&p=b8d50209-93

[Johan Eckerstrom - {Eficode}]

Is this feature already released? where can I find documentation on how it works?