How secure is using Cloud Confluence?

[Sadaf Mufti]

1.      How to enable two factor authentication?

2.      What kind of security controls are implemented?

3.      How can one configure for enforcing policy related to strong password & account lockout for multiple failed attempts?

[Shannon S]

Hello Sadaf,

In addition to the information that Quentin sent you, which should answer many of your concerns, I'll provide a bit more details.

1. Two factor authentication is not currently available for Cloud. I created a feature request some time ago to suggest adding this: ID-256. As an alternative, if you have G Suite for your company, you could consider enabling this. Then, you can use the built-in two factor that Google has and use it to sign in.
2. Your second questions can likely be answered by the documentation that Quentin sent, but if you have any additional questions after reviewing that, please let us know!
3. Information regarding setting a password policy is available from our site. This is only possible to control when you have verified a login domain. If you have not, then it will automatically use the Atlassian ID password requirements. Lastly, when a login attempt is exceeded, then the user is locked out until they reset their password.

I hope this clarifies a few of your concerns, but do let us know if you have anything further you'd like to ask.

Kind Regards,
Shannon

[QuentinB]

Hello, you can find some answer in the Atlassian documentation :

• https://www.atlassian.com/trust/faq
• https://www.atlassian.com/trust/policies/cloud-security
• https://confluence.atlassian.com/confeval/other-atlassian-evaluator-resources/atlassian-cloud-security

Regards