Allow to create ticket without login

Iris Ayelin
Contributor
August 1, 2024

Hi,

I'm looking for a way to allow people to create tickets on our project without having to log in to their accounts.

The idea is to generate a QR code that contains a URL leading to the portal. People can then scan this code to access the portal and submit a ticket.

Currently, the customer's permission is set to 'Allow customers to create an account,' which requires them to log in before creating a ticket.

I discovered an option to enable "Customers can access and send requests from the portal without logging in," but this permits external individuals to create a ticket on someone else's behalf.

Do you have any suggestions for achieving this without compromising security?

 

Thank you! 

3 answers

1 vote
Lisa Forstberg
Rising Star
Rising Star
Rising Stars are recognized for providing high-quality answers to other users. Rising Stars receive a certificate of achievement and are on the path to becoming Community Leaders.
August 1, 2024

Hi @Iris Ayelin

Just to be sure - this question is posted in the Jira product forum, but you are referring to the Jira service management product right? Only Jira SM projects have a portal. 

If you want a Jira SM project to be open to the public and not require sign in you need to  have these settings on:

"Customers can access and send requests from the portal without logging in" in the product overall configuration (cog > product > Jira Service Management > Customer Access) plus ensure that your project also is set to Open for channel access.

With these settings on the reporter are allowed to add tickets without logging in or creating accounts, but they will be forced to add an email address in order to receive email notifications. 

Yes, potentially the reporter of a ticket can choose to add another users email address there instead of its own, is that what is bothering you? 

Here is a similar question https://community.atlassian.com/t5/Jira-Service-Management/How-risky-is-it-to-have-a-customer-portal-set-to-Anyone-can/qaq-p/2150098

br

Lisa

Rilwan Ahmed
Community Leader
Community Leader
Community Leaders are connectors, ambassadors, and mentors. On the online community, they serve as thought leaders, product experts, and moderators.
August 1, 2024

Hi @Iris Ayelin ,

You can enable the settings mentioned by @Lisa Forstberg  directly in url https://<baseURL>.atlassian.net/jira/settings/products/servicedesk/customer-access

image.png

Iris Ayelin
Contributor
August 1, 2024

Hi,

 Thanks for your answers!

 

 @Lisa Forstberg Yes, I meant the Jira Service Management product.

 

I came across this option, but it's pretty troubling due to the security vulnerability. (External individuals can apply requests as internal users.) 

Do you know of a more secure way to provide access to the portal without requiring a login? By "more secured," I mean there is no option to input an email address that links to the ticket as the reporter.

 

Perhaps there's a way to create a URL that bypasses the login or configure a specific authorized network for access?

 

I appreciate your help!

Lisa Forstberg
Rising Star
Rising Star
Rising Stars are recognized for providing high-quality answers to other users. Rising Stars receive a certificate of achievement and are on the path to becoming Community Leaders.
August 1, 2024

Hi, 

Sorry there is a balance act on the three options:

  1. allow for anyone that knows the URL to create an issue
  2. force the users through a signup process before they are allowed to create an issue
  3. have total control and invite only specific users. 

But I am not really agreeing to the statement "External individuals can apply requests as internal users." The anonymous user cannot grant themselves some sort of internal user (ie agent) permission this way. They are not allowed to any other jira project than this, and only as a customer ("portal user")

The worst that can happen is that they will spam the system and someone else with notifications as if they create a lot of issues typing in an email address that isn't theirs. Option 2 would then be opening for a similar spam risk.

So for context. How should this QR code to the URL be distributed? How big is your intended audience?  What is your options to test for a while to see if it actually gets out of hand? If it does then be prepared to change the permission of the portal, alternatively remove the portal totally.

br

Lisa

0 votes
Olha Yevdokymova_SaaSJet
Atlassian Partner
September 27, 2024

Hi @Iris Ayelin 

If you are okay to use add-ons Smart Jira Forms offers a more controlled and secure way to allow ticket creation without requiring login credentials. Here’s how you can leverage it:

  1. Publicly Shareable Forms with Secure Submission:

    • Smart Jira Forms allows you to create forms that can be shared publicly via a URL and you can create QR code from URL as well. These forms can be filled out by anyone without requiring them to log in, which aligns perfectly with your QR code strategy. You can also embed forms anywhere like website or Confluence using iFrame.
  2. Automatic Ticket Creation:

    • Once the form is submitted, Smart Jira Forms automatically generates a Jira ticket with the data provided. 
  3. Field Mapping and Data Validation:

    • Map form fields directly to Jira ticket fields, ensuring that the correct data flows into each ticket. Use form logic to validate inputs and avoid spam or incorrect submissions.
  4. Form Restrictions:

    • Smart Jira Forms allows you to set restrictions on who can view or access the form. You will soon have acces to limit submissions to specific users as well. 

     

 

oy1.png

Olha Yevdokymova

Product Marketing Manager

 

SaaSJet
olha.y@saasjet.com

0 votes
Rilwan Ahmed
Community Leader
Community Leader
Community Leaders are connectors, ambassadors, and mentors. On the online community, they serve as thought leaders, product experts, and moderators.
August 1, 2024

Hi @Iris Ayelin ,

Enable Email requests for your project. Any user can just send email and Jira will create ticket. 

Refer Add a custom email account and How do customers send requests by email?  for more details

Iris Ayelin
Contributor
August 1, 2024

Hi @Rilwan Ahmed 

Thank you for your response, but unfortunately, it can't help me because it requires logging into the email account.

My goal is to create a QR code that links to the portal and enables users to submit a ticket without logging into Jira in a secure way.

Suggest an answer

Log in or Sign up to answer
DEPLOYMENT TYPE
CLOUD
PRODUCT PLAN
STANDARD
PERMISSIONS LEVEL
Product Admin
TAGS
AUG Leaders

Atlassian Community Events