Two-Step Authentication via Google Auth/Authy/FreeOTP for Confluence Server
Asked by adrianoatl:

I have not been able to find how to add or enable 2FA/two-step authentication for extra security via apps such as Google Auth, Authy, FreeOTP, etc., while keeping the username/password to log into Confluence Server. Is there such an option out there yet?

* UPDATE: Duo offers a solution for that, but it seems overly complicated for what it should do I reckon, and relies on an external website, which may increase the risk of being locked out: <https://duo.com/docs/confluence>

Any other solutions?


Answers:
author: Ed Letifov _TechTime - New Zealand_
body: If you need a 2FA for Confluence Server why don't you just search for 2FA on marketplace?

<https://marketplace.atlassian.com/search?query=2fa>

I've been lead to this question only because someone mentioned SSO and we are a vendor of [EasySSO](https://marketplace.atlassian.com/apps/1212583/easy-sso-confluence-kerberos-ntlm-saml?hosting=server&tab=overview "EasySSO for Confluence - enterprise SSO solution") that integrates with [SecureLogin 2FA for Confluence](https://marketplace.atlassian.com/apps/1214491/secure-login-2fa-confluence?hosting=server&tab=overview "SecureLogin 2FA - a two-factor solution for Confluence Server") and I can attest that it (the 2FA plugin) works very well.

Certainly if you want to add the complexity of SAML SSO - you can look at any on the SAML plugins, but why bother?

comments: author: adrianoatl
body: Thanks, Ed, I'll have a look at EasySSO, which indeed does look interesting.


author: Ed Letifov _TechTime - New Zealand_
body: Well thanks, but the main point was - if you need 2FA, look at 2FA apps. [SecureLogin](https://marketplace.atlassian.com/apps/1214491/secure-login-2fa-confluence?hosting=server&tab=overview&_ga=2.238627014.7304071.1557623787-507952430.1528877624 "SecureLogin - two-factor authentication solution for Atlassian applications") is the 2FA app. [EasySSO](https://marketplace.atlassian.com/apps/1212583/easy-sso-confluence-kerberos-ntlm-saml?hosting=server&tab=overview&_ga=2.237505734.7304071.1557623787-507952430.1528877624 "EasySSO - SSO solution for Atlassian applications") is just a 5-in-1 SSO solution that supports NTLM, Kerberos, SAML, X.509 and headers-based authenticators and integrates with SecureLogin.


author: adrianoatl
body: Most definitely, I got that. I'm looking at [Secure Login](https://marketplace.atlassian.com/apps/1214491) right now, which looks simple enough for our current needs. However, I'm also looking at EasySSO for further expansion and needs.


author: Ed Letifov _TechTime - New Zealand_
body: OK great. As Gold Solution Partner in New Zealand we are running 24x7 support - so if you have a question about EasySSO, please do reach to us, and we will make it work for you!


author: adrianoatl
body: Thanks Ed, will do.


author: Stephen Sifers
body: Hello Adriano,

If you're not wanting to have to deal with additional factors for Authentication then your best option for using a simplified MFA to access Confluence would be to use SAML with SSO. SAML with SSO will allow your users to authenticate prior to accessing Confluence and MFA is completed at the SSO portal prior to the application. There are a few solutions which add SAML to Confluence via marketplace app along with the option for using [Crowd \| Atlassian.](https://www.atlassian.com/software/crowd) You may find a preset search for SAML at [Atlassian Marketplace \| SAML](https://marketplace.atlassian.com/search?query=SAML).

Additional resources which may prove helpful are as follows:

* [Server: SSO and SAML support](https://confluence.atlassian.com/confeval/other-atlassian-evaluator-resources/server-sso-and-saml-support)
* [Adding SAML integration to your existing user management infrastructure](https://confluence.atlassian.com/enterprise/adding-saml-integration-to-your-existing-user-management-infrastructure-861244976.html)

I hope this proves helpful and you're able to start protecting your Confluence instance with MFA.

Regards,  
Stephen Sifers

comments: author: adrianoatl
body: Thanks, Stephen, your input is much appreciated.


author: Vikas Nare
body: For Confluence Server \& Datacenter, you can also refer to the [miniOrange Confluence 2FA/MFA](https://marketplace.atlassian.com/apps/1221328/mo-two-factor-authentication-2fa-for-confluence?hosting=datacenter&tab=overview) addon which provides a rich set of 2FA methods, such as TOTP applications(Mobile Authenticator), OTP Over Email, Security Questions, Backup Code.

It supports Mobile Authenticator applications like Google authenticators, Authy authenticators, Duo authenticators, Microsoft authenticators, Symantec VIP \& so on.

Note:- Plugin is also compatible with all SSO addons.

Thanks,  
Vikas

PS: I work for miniOrange one of the top SSO \& 2FA/MFA vendors in the Atlassian Marketplace. Feel free to reach out to [miniOrange Support](https://miniorange.atlassian.net/servicedesk/customer/portal/2) in case of any questions or need assistance with the plugin configuration.


author: adrianoatl
body: I've finally settled for [2FA / U2F Secure Login for Confluence](https://marketplace.atlassian.com/apps/1220359/). It does the job great and is rightly priced for what it does. The installation is fairly straightforward.


Tags: atl-adm

confluence-server

server