How can we enforce MFA (2FA) for our Jira Groups having users spread over many domains ?

[Stephan Krause]

How can we enforce MFA (2FA) for our Jira Users and/or Groups having users spread over many different domains ? Eg. user a@x.com, user b@y.com

We cannot register every domain of each user .

How can we create an authentification policy for "any domain" ?

(How) can Atlassian Access help us?

Thanks for your help.

Stephan

[Mohanraj Thangamuthu · Accepted solution]

Hello, Good day. 2FA enforced authentication works only for verified domains on same Org . https://support.atlassian.com/security-and-access-policies/docs/enforce-two-step-verification/. 

However, there is no option available through Atlassian Access, where you can use OTP method. Please refer : https://jira.atlassian.com/browse/ACCESS-102

[Stephan Krause]

hello Mohanraj

after some review and study on Atlassian docu, I have to come back to your answer:

a) According to Atlassian, users like personal@gmail.com are external https://support.atlassian.com/security-and-access-policies/docs/who-are-external-users/

b) According to Atlassian, we can assign a test policy for (5) external users https://support.atlassian.com/security-and-access-policies/docs/available-external-user-security-settings/

but in our organization, we cannot setup such a policy without registering domains. But registering domains like gmail.com is not possible.

so, how can we enforce 2FA for external users?

Thanks

Stephan