SAML-authenticated user enable pipelines

[Stephen Mitchell]

My user authenticates to Atlassian using Azure AD and SAML.  The user cannot enable two-step verification in Atlassian -- only in Azure.  BitBucket refuses to enable pipelines on the user's repository, because two-step verification is not enabled.

Is there a way to enable pipelines for SAML-authenticated users?

[Caroline R · Accepted solution]

Hi, @Stephen Mitchell, welcome to the community! 

I understand they can’t enable MFA because they have a managed account, is that correct? If that’s the case, I would like to give you some context about MFA and 2sv:

• MFA is related to the Atlassian account, so you enable it by accessing your Atlassian profile, and indeed if the user has a managed account, they might see a message like this when trying to enable their MFA: You can't enable two-step verification because your account is managed 

• Then we have the 2sv, which is related to the Bitbucket Cloud account, and you can enable it by accessing your Bitbucket account > Personal settings > Two-step verification. In this case, even managed accounts can enable the 2sv on Bitbucket.

So my assumption here is that this user tried to enable their MFA and they weren’t able to do so as they have a managed account. However, they should be able to configure the 2sv on their Bitbucket Cloud account.

The following document explains all the steps to achieve this, in case you would like to share it with them: 

• Enable two-step verification

In order to enable Pipelines, the user needs to have the 2sv enabled. So once they have the 2sv, they will be able to use Pipelines.

I hope this helps, but do let me know if you have any questions. 

Kind regards,
Caroline