Is it possible to enable SecureLogin plugin per-user?

[Deleted user]

Hello,

Plugin is great but it have few issues that prevent us using it for larger user base:

• It enables 2FA for all - this is bad as not all users have access to soft tokens, also plugin do not support SMS fallback. 
• When logging in for the first time, and user accidentally click "Cancel", QR is gone, that actions render user account to be locked. Actual behavior suppose to be: Cancel->Disable 2FA for user OR->Back to QR.

thanks,

[Frank Polscheit]

Using current version 1.0, you cannot distinguish between different users and/or groups. Having enabled secure login, all users are effected. Nevertheless, we have put your request on our roadmap for one of the next releases.

Kind regards,
Frank

[John Sibo]

Frank, any chance this functionality or an ability to whitelist certain user groups will be coming soon? 

[Frank Polscheit]

Published version 1.1 of SecureLogin for JIRA contains black-/white-list of IP-range as well as JIRA group. Use that e.g. forcing external access to 2FA (white-list your internal IP-range) or specify a JIRA group which members must use 2FA or not (depending of white- or black-list selected). You can download v1.1 via Atlassian Marketplace.

Kind regards,
Frank 

[John Sibo]

Hey Frank, 
We see that in the functionality but the plugin is not showing the user black/white-listing.

Any ideas? My team member also just sent you an email.

JS 

[Frank Polscheit]

Please have a look into the published documentation (http://www.syracom.de/fileadmin/user_upload/Images_neu/Zum_Thema/Downloads/ATLAS-Administrator_sGuideSecureLoginforJIRA-050916-0924-24.pdf) Does this work for you?

Kind regards,
Frank