Two-Step Authentication via Google Auth/Authy/FreeOTP for Confluence Server

[adrianoatl]

I have not been able to find how to add or enable 2FA/two-step authentication for extra security via apps such as Google Auth, Authy, FreeOTP, etc., while keeping the username/password to log into Confluence Server. Is there such an option out there yet?

• UPDATE: Duo offers a solution for that, but it seems overly complicated for what it should do I reckon, and relies on an external website, which may increase the risk of being locked out: https://duo.com/docs/confluence

Any other solutions?

[Ed Letifov _TechTime - New Zealand_ · Accepted solution]

If you need a 2FA for Confluence Server why don't you just search for 2FA on marketplace?

https://marketplace.atlassian.com/search?query=2fa

I've been lead to this question only because someone mentioned SSO and we are a vendor of EasySSO that integrates with SecureLogin 2FA for Confluence and I can attest that it (the 2FA plugin) works very well.

Certainly if you want to add the complexity of SAML SSO - you can look at any on the SAML plugins, but why bother?

[adrianoatl]

Thanks, Ed, I'll have a look at EasySSO, which indeed does look interesting.

[Ed Letifov _TechTime - New Zealand_]

Well thanks, but the main point was - if you need 2FA, look at 2FA apps. SecureLogin is the 2FA app. EasySSO is just a 5-in-1 SSO solution that supports NTLM, Kerberos, SAML, X.509 and headers-based authenticators and integrates with SecureLogin.

[adrianoatl]

Most definitely, I got that. I'm looking at Secure Login right now, which looks simple enough for our current needs. However, I'm also looking at EasySSO for further expansion and needs.

[Ed Letifov _TechTime - New Zealand_]

OK great. As Gold Solution Partner in New Zealand we are running 24x7 support - so if you have a question about EasySSO, please do reach to us, and we will make it work for you!

[adrianoatl]

Thanks Ed, will do.

[Stephen Sifers · Accepted solution]

Hello Adriano,

If you’re not wanting to have to deal with additional factors for Authentication then your best option for using a simplified MFA to access Confluence would be to use SAML with SSO. SAML with SSO will allow your users to authenticate prior to accessing Confluence and MFA is completed at the SSO portal prior to the application. There are a few solutions which add SAML to Confluence via marketplace app along with the option for using Crowd | Atlassian. You may find a preset search for SAML at Atlassian Marketplace | SAML.

Additional resources which may prove helpful are as follows:

• Server: SSO and SAML support
• Adding SAML integration to your existing user management infrastructure

I hope this proves helpful and you’re able to start protecting your Confluence instance with MFA.

Regards,
Stephen Sifers

[adrianoatl]

Thanks, Stephen, your input is much appreciated.

[Vikas Nare]

For Confluence Server & Datacenter, you can also refer to the miniOrange Confluence 2FA/MFA addon which provides a rich set of 2FA methods, such as TOTP applications(Mobile Authenticator), OTP Over Email, Security Questions, Backup Code.

It supports Mobile Authenticator applications like Google authenticators, Authy authenticators, Duo authenticators, Microsoft authenticators, Symantec VIP & so on.

Note:- Plugin is also compatible with all SSO addons.

Thanks,
Vikas

PS: I work for miniOrange one of the top SSO & 2FA/MFA vendors in the Atlassian Marketplace. Feel free to reach out to miniOrange Support in case of any questions or need assistance with the plugin configuration.

[adrianoatl]

I've finally settled for 2FA / U2F Secure Login for Confluence. It does the job great and is rightly priced for what it does. The installation is fairly straightforward.