2FA for Confluence On Premise

[Sunny Lakhiyan]

What is the official recommendation? and if none. What are other customers using to implement 2FA - confluence/AD account/Crowd + Google Authenticator for eg?

[Anton Storozhuk]

@Sunny Lakhiyan 

There's a Jira 2FA plugin available with U2F devices support: 

https://marketplace.atlassian.com/apps/1220048/2fa-u2f-totp-secure-login-for-jira?hosting=server&tab=overview.

For Confluence: https://marketplace.atlassian.com/apps/1220359/2fa-u2f-secure-login-for-confluence?hosting=server&tab=overview

[Titus]

For Confluence server, you can check out the benefits of our new 2FA Confluence add-on for two-factor authentication using your SecSign ID.
https://marketplace.atlassian.com/plugins/com.secsign.secsignid-confluence/server/overview

For a more detailed installation tutorial visit
https://www.secsign.com/developers/atlassian/confluence-two-factor-authentication/

[Titus]

We have so far published a two-factor authentication add-on for jira. Right now we are targeting an 2fa add-on for confluence. So we try to figure out which special needs might exists for an 2fa add-on.

We hope that we can publish a 2fa plugin for confluence quite soon.

Titus

https://www.secsign.com/developers/atlassian/jira-two-factor-authentication/

https://marketplace.atlassian.com/plugins/com.secsign.secsignid/server/overview

[Brian]

Hi Sunny, Atlassian doesn't have an official recommendation for 2FA. However, there are third-party tools that provide that functionality, such as Duo for Confluence, which is in no way a recommendation, but simply an example of what's out there. I don't know what other customer use for 2FA, but perhaps others will chip in on this thread.