2FA for Confluence On Premise

[Sunny Lakhiyan]

What is the official recommendation? and if none. What are other customers using to implement 2FA - confluence/AD account/Crowd + Google Authenticator for eg?

[Anton Storozhuk]

@Sunny Lakhiyan 

There's a Jira 2FA plugin available with U2F devices support: 

https://marketplace.atlassian.com/apps/1220048/2fa-u2f-totp-secure-login-for-jira?hosting=server&tab=overview.

For Confluence: https://marketplace.atlassian.com/apps/1220359/2fa-u2f-secure-login-for-confluence?hosting=server&tab=overview

[Brian]

Hi Sunny, Atlassian doesn't have an official recommendation for 2FA. However, there are third-party tools that provide that functionality, such as Duo for Confluence, which is in no way a recommendation, but simply an example of what's out there. I don't know what other customer use for 2FA, but perhaps others will chip in on this thread.

[Titus]

We have so far published a two-factor authentication add-on for jira. Right now we are targeting an 2fa add-on for confluence. So we try to figure out which special needs might exists for an 2fa add-on.

We hope that we can publish a 2fa plugin for confluence quite soon.

Titus

https://www.secsign.com/developers/atlassian/jira-two-factor-authentication/

https://marketplace.atlassian.com/plugins/com.secsign.secsignid/server/overview

[Titus]

For Confluence server, you can check out the benefits of our new 2FA Confluence add-on for two-factor authentication using your SecSign ID.
https://marketplace.atlassian.com/plugins/com.secsign.secsignid-confluence/server/overview

For a more detailed installation tutorial visit
https://www.secsign.com/developers/atlassian/confluence-two-factor-authentication/

[Vikas Nare]

For Confluence Server & Datacenter, you can also refer to the miniOrange Confluence 2FA/MFA addon which provides a rich set of 2FA methods, such as TOTP applications(Mobile Authenticator), OTP Over Email, Security Questions, Backup Code.

It supports Mobile Authenticator applications like Google authenticators, Authy authenticators, Duo authenticators, Microsoft authenticators, Symantec VIP & so on.

Note:- Plugin is also compatible with all SSO addons.

Thanks,
Vikas

PS: I work for miniOrange one of the top SSO & 2FA/MFA vendors in the Atlassian Marketplace. Feel free to reach out to miniOrange Support in case of any questions or need assistance with the plugin configuration.