Can we enforce 2FA for guest users? Or even just view 2FA status?

Question

We're probably moving to Atlassian Access so we can use SSO for accounts on our verified domain.  We have some (external) guest users.  Will we be able to enforce 2FA for them?  I think the answer is 'no', in which case will we at least be able to see whether or not they have enabled 2FA?

Johan Eckerstrom - {Eficode} · Answer

Is this feature already released? where can I find documentation on how it works?

Dave Meyer · Answer

We are actively working on launching a new feature for this: https://www.atlassian.com/wac/roadmap/cloud/external-user-security-eap?search=external&p=b8d50209-93

Utkarsh Agarwal · Answer

Hi @Caroline Hallam-Baker

You would not be able to enforce 2FA on unmanaged/unclaimed accounts. Currently its also not possible to view the status of 2FA of such accounts. However, if you have a list of the guest accounts, you can reach out to Atlassian access cloud support team, and they should be able to confirm the 2FA status.

However, Kindly note that since these are unmanaged accounts there is no guarantee on keeping the 2FA active on such accounts. The workaround is to create an alternate account for such guest users under your claimed domain.

Regards

Utkarsh