Is there a way to prevent mobile users from accessing a Cloud site?

[Rob Horan]

I have been asked to find a way to block users from accessing a particular Atlassian Cloud site (Jira and Confluence on atlassian.net) from mobile devices.  At minimum the apps should be blocked, but mobile browsers should as well.

Is this possible, and if so, how?

[Nic Brough -Adaptavist- · Accepted solution]

There's no way to do this.

If you were on Server, you could do some stuff on the networking side - stick Jira and Confluence behind a proxy, with which you could then code some stuff that tried to do browser or device identification before letting the connection through (that would stop casual users doing it, but not people like us who can spend 30 seconds setting up clients to lie to your detection code)

On Cloud, there is nothing.

[Rob Horan]

Thanks - that was what I assumed as well, but I was tasked with investigating and identifying any possibilities.  I spent some time looking, and found nothing, so I thought I'd post here, just in case.  Thanks!

[Nic Brough -Adaptavist-]

Always worth asking!

[Stephanie Zhang (Product)]

Hey there @Rob Horan ! My name is Stephanie Zhang and I'm a product manager on the Confluence Cloud mobile team. I'd love to understand a little more about your use cases and your concerns around mobile usage. 

Any chance you'd be willing to chat with me? As a token of my appreciation you'd be eligible for a $70 giftcard. Let me know your availability szhang5@atlassian if so. 

Thanks!

[Rob Horan]

Hello,

Sure - I'll send a message separately.

[Marcin Kubica]

Hi @Stephanie Zhang (Product) 

Has there been any movement in this area? Some companies require this option for data loss prevention.

Many thanks
Marcin

[Rob Horan]

@Stephanie Zhang (Product)  - am I correct in assuming that IP Allowisting would satisfy this requirement?

[Chris F]

Any update on Data loss prevention for JIRA and Confluence? We have IP Allowlsit in place to limit access but that breaks our mobile app. a DLP solution would fix this. 

[Marcin Kubica]

"DLP" in this case being "[x] disable mobile client"

Or you have to roll out SAML with Context-Aware Access (ie. Google Workspace) tied down to company non-mobile managed devices. Hacky as CAA works only here due to the fact it's unable to execute endpoint-verification on a mobile (hence it forbids the access) ;)