How can I configuration SAML in Keyclock to use atlassian cloud

[Thanapon Srithundorn]

How can I  configuration SAML  SSO in Keyclock to use atlassian cloud?

I got document to configure here

https://confluence.atlassian.com/cloud/saml-single-sign-on-943953302.html

But Keycloak  unsupported and document not have details enough to setting.

please help guide and show configure example.

[Lars Öhlin]

Hi,

And that's good and all. But how do I list all users and view if they comply to the manual enforcement. I can't find anywhere to list my users MFA status.

Thanks!

[Jens Hassler]

We just migrated to the cloud (had to, unfortunately) and I wanted to enforce the second factor for all our users because the data we store in this service is very sensitive information. Unfortunately we'd be forced to pay another $160/month to be able to enforce the industry standard that is recommended everywhere from anyone. There is and should be no professional service where this is not possible. More and more companies make it mandatory - for good reasons.

On top of that, I also expected there would be more 2nd factor options including Passkeys support.

But: Nothing. Very disappointing.

[Iain McLean]

In my opinion, this only shows how far behind and sick Atlassian are, making companies pay to enforce 2FA is just outdated, irresponsible and downright pathetic. Grow Up Atlassian! You are a farce to have this kind of attitude towards security.

[Lars Öhlin]

That works and you dont even have to view each account individually. Just export a csv file of all users and there is a column "Two-step verification enabled" that will give you the consolidated data.

[Simon Attrill]

I have discovered how to check if 2FA is enabled (for users using email domains that you have control over)

1. Add the required TXT record to the email domain see:
https://confluence.atlassian.com/cloud/verify-a-domain-for-your-organization-873871234.html

2.Now visit Directory > Managed Accounts and click on "Show details" for each user.  Under the Security heading you will see if 2FA is enabled for the user.

[Simon Attrill]

2FA is essential to maintain security and it's therefore essential to be able to check that all users are using it!  I also need to check if all our users are using 2FA as it's no longer being automatically enforced.  I can't justify the cost of the Access service just to check if users are using 2FA!

[Deleted user]

I am having the same problem as I have a number of users that are not managed accounts so I cannot enforce 2FA. So I want to ask my users to activate and check whether they did. For those who didn't I will revoke their access.

[Anthony Cunningham]

As per Lars, how can I as an admin see which of my users have 2FA enabled? This is an essential ability. 

Thanks.

[Erwan Cosnuau]

Fantastic!

Thanks @Rodrigo B., 

I will have a look at disabling Atlassian Access and maintain our 2FA then... we can live without enforcing it automatically :-) good old manual enforcement and psychological pressure will do for our users

I knew this was too bad to be true

Thanks again

[Rodrigo B.]

Hello @Erwan Cosnuau,

Welcome to the community!

Atlassian is not charging for 2FA, all Atlassian accounts can still enable it and use without cost, the feature that is part of the Atlassian Access product is the Enforced Two-Step Authentication, which is additional administrative control to enforce this policy to all Atlassian accounts under your verified domains, you can see more details below:

Documentation regarding 2FA for Atlassian accounts

• https://confluence.atlassian.com/cloud/secure-your-account-with-two-step-verification-939505063.html

And documentation regariding Enforced 2FA for Atlassian organizations

• https://confluence.atlassian.com/cloud/enforced-two-step-verification-938859738.html

Kind regards,

Rodrigo Becker
Atlassian Cloud Support