Hello.
I have crowd datacenter version doing sso with jira/bitbucket/bamboo/confluence.
Is there a way I can add 2fa without adding any plugin or anything like that?
Just an option or a configuration which will enable 2fa/2ma.
Hello @[deleted] ,
Please have a look at 2FA for Crowd: U2F & TOTP plugin. It's easy to install and easy to use. Crowd Data Center can use apps in the same way as Crowd Server. So feel free to use our Server app in your Data Center instance.
Regards,
Liubov
does your plugin work with sso?
this means if I login to JIRA for example I would also be logged in to Confluence, Bitbucket, Bamboo...
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
@[deleted] ,
If you install this plugin in Crowd, SSO between Crowd and the other products will continue working. 2FA will be triggered only in Crowd.
We're currently looking for a solution of SSO support implementation. This is not a trivial case and we let you know the estimates as soon as they will be available.
Regards,
Liubov
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
Or (just throwing it out there) you can integrate your Atlassian applications with any publicly available SAML IdP (e.g. Azure AD, OKTA, ADFS) that DOES have 2FA, move users and group management there or even connect to your on premises AD and then you wouldn't need Crowd.
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
Hello Sebastian,
unfortunately, Atlassian does not yet offer a 2FA option for Crowd setups.
One option to secure Crowd SSO with 2FA is the SecSign ID plugin. You can download it from the Atlassian marketplace.
The cloud version of the plugin is free, or you can have an on-premise setup that keeps all your information safe on your premise. It is currently active in numerous large datacenter versions.
The plugin allows you to use the convenient challenge response authentication with the SSO, and it can be customized to fit your specific setup:
It is currently active in numerous large datacenter versions.
Let me know if you have any questions.
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.