IP allowlist removal

[Vera Valshonok]

Hi everyone!

Can IP allowlist stop being used if a company moves to a 2 factor identification?

How can it be done?

Id appreciate if you can share your experience with it.

[Joseph Chung Yin · Accepted solution]

@Vera Valshonok -

Are your site using Atlassian Guard (formally known as Atlassian Access) subscription.  It is because 2FA usage meaning you are using your own IDP to control user accounts against your site.  Keep in mind Atlassian Guard is a separate subscription than your existing JSM subscription plan.

If so, take a look at this reference link -

https://support.atlassian.com/security-and-access-policies/docs/enforce-two-step-verification/

Here is the link regarding to Atlassian Guard -

https://support.atlassian.com/security-and-access-policies/docs/understand-atlassian-guard/

Hope this helps.

Best, Joseph Chung Yin

[Vera Valshonok]

Yes, we are using Atlassian guard + IP allowlist

[Victor Law · Accepted solution]

Hi @Vera Valshonok

It depends on the company's Security team and compliance.

In most cases, the company requires 2FA authentication to be enabled, regardless of whether an application is restricted to the internal network.

Thank you.