How to enable Azure Multifactor Authentication for Jira Server

[Pravin Patil]

Hello,

My current Jira Server (OnPremise) is Authenticated via Microsoft Active Directory.

We want to enable dual multifactor authentication (username, password + mobile based security code) on Jira.

One of the options suggested is to use Azure multifactor authentication.

How to do this? I was not able to locate an implementation guide.

If I chip-in Azure MFA then Microsoft AD needs to be synched with Azure, and Azure with Jira, is this understanding correct? 

Please suggest how to get started.

[Jimmy Van (GLiNTECH)]

Hi Pravin,

Check out one of the Single Sign On marketplace apps, e.g. https://marketplace.atlassian.com/apps/1212130/saml-single-sign-on-sso-jira-saml-sso?hosting=server&tab=overview

You integrate the app with Azure AD, and then enforce MFA through Azure AD.

The app will also sync your user directory with Azure through their User Sync.

You can post back here or reach out to the team directly - https://calendly.com/resolution-support

[Lokesh Naktode_miniOrange]

Hi @Pravin Patil ,

Yes, you are right with your understanding. You need to synchronize your Microsft AD with Azure AD and connect Azure AD with JIRA for single sign-on. You can now enable Azure AD MFA in addition to SSO.

To connect JIRA to Azure AD for single sign-on, you can use the JIRA SAML SSO app from the Atlassian Marketplace and here are the steps to enable MFA in the Azure

https://docs.microsoft.com/en-us/azure/active-directory/authentication/howto-mfa-mfasettings

I work for miniOrange and in case if you need further assistance with the SSO app and Azure AD configuration, you can reach out to miniOrange at atlassiansupport@miniorange.com or through the customer portal

Thanks,

Lokesh