{"_id":"592e873817b7fb002f151cd1","project":"55edea207145f717001ac12c","version":{"_id":"55edea207145f717001ac12f","project":"55edea207145f717001ac12c","__v":11,"createdAt":"2015-09-07T19:48:48.670Z","releaseDate":"2015-09-07T19:48:48.670Z","categories":["55edea217145f717001ac130","55ffa8038c0c9d0d00dcac72","55ffbaa48c0c9d0d00dcac88","55ffbd3e8c0c9d0d00dcac8b","55ffbee40e2b090d00863393","55ffc4306932a00d00ba7a85","55ffc66bfeaf310d007dd6c8","55ffc9c2feaf310d007dd6d1","55ffceca0e2b090d008633b2","560111b06811d00d00ceb34e","560262e74f15002100ee4445"],"is_deprecated":false,"is_hidden":false,"is_beta":false,"is_stable":true,"codename":"","version_clean":"1.0.0","version":"1.0"},"category":{"_id":"560111b06811d00d00ceb34e","pages":["56011249f01fb90d00d4bf70","56013a3e6811d00d00ceb381"],"version":"55edea207145f717001ac12f","__v":2,"project":"55edea207145f717001ac12c","sync":{"url":"","isSync":false},"reference":false,"createdAt":"2015-09-22T08:30:40.352Z","from_sync":false,"order":9999,"slug":"plugins","title":"Plugins"},"user":"55ede9ed1452cd0d009e5e6b","__v":0,"updates":[],"next":{"pages":[],"description":""},"createdAt":"2017-05-31T09:04:56.874Z","link_external":false,"link_url":"","githubsync":"","sync_unique":"","hidden":false,"api":{"results":{"codes":[]},"settings":"","auth":"required","params":[],"url":""},"isReference":false,"order":999,"body":"# Rublon Two Factor Authentication (2FA) for Atlassian products\n\n* * *\n\n\n## Introduction\n\n### About the Two Factor Authentication\n\nTwo-factor authentication is a technology that allows identification of users involving two different components. We can split those components into two groups: \"something that the user knows\" and \"something that the user possesses\". It greatly improves the security because having access to only one of the factors is not enough to authenticate the user. The best example of everyday use are credit cards where you need the physical card (something that the user possesses) and PIN code (something that the user knows) to use it. Even if you have your card stolen from you, a thief is not too likely to know the PIN and therefore can't use your money. To improve security even further physical characteristic of the user (fingerprint, eye iris, voice) can be used as one of the factors. \n\n### About the Rublon\n\nRublon is a two-factor authentication solution that provides 2 types of second factor authentication. The first one is authentication via mobile phone by scanning QR code. Opposite to many similar solutions Rublon doesn't require entering one-time password generated and sended to your mobile phone. Rublon mobile application automatically connects to Rublon and authenticates the user based on the scanned QR code. The second option is authentication via e-mail address. It's less secure but is usable for users who for various reasons can't or don't want to authenticate with their mobile phones. In this case an e-mail is sent to the user and in up to 15 minutes user needs to confirm their identity by clicking the verification link. Rublon also allows to add the device you're currently logging in with to trusted devices list and  in future proceed with verification without scanning QR code or clicking the verification link. It's useful for people who are the only users of Atlassian products on the particular device and don't want to perform additional steps while logging in.\n\n### About the plugin\n\nRublon Two-Factor Authentication (2FA) for Atlassian products is a plugin that provides the second factor of authentication often described as \"something that the user possesses\". In this case it is a mobile phone, which you use to scan a QR code. After scanning Rublon checks if user used the correct device. If the device matches to the one stored in database, user is getting authenticated. The first factor (something that the user knows) is handled by Seraph Authenticator (default authenticator for Atlassian products). The second factor is provided by a custom filter, called just after the original Atlassian products security filter. All communication between client and server in Atlassian products goes through it.\n\n## Supported Atlassian products\n\n* JIRA\n* Confluence\n* Bamboo\nIf you cannot find the application you are using on the list contact support.\n\n## First steps\n\nTo start using the Rublon Two-Factor Authentication (2FA) plugin for Atlassian products you should:\n\n* Install the Rublon mobile app on your smartphone, create a new account and confirm your e-mail address.\n* Visit the Rublon Admin Dashboard at www.admin.rublon.com, log in and scan the QR code that will appear using the Rublon mobile app.\n* Go to the \"Add application\" form (select Applications -> Protect an Application in menu bar) and fill in the required fields. If you can't find your product on the \"Application type\" list then select \"Custom integration using Java SDK\".\n* Copy the provided system token and secret key, which will be used to identify the integrated system and verify the authenticity and integrity of the messages exchanged with Rublon API (you will need it later while configuring plugin).\n\n## Installation\n\n* Log in into your Atlassian product as an administrator. \n* Click cog in top right corner and select \"Add-ons\". \n* Choose \"Find new add-ons\". \n* Type \"Rublon\" in search area and find \"Rublon Two-Factor Authentication (2FA)\" plugin on the list. \n* Select \"Install\" button.\n\nIf you can't find the plugin in \"Find new add-ons\" area then you should: \n* Download plugin file from Atlassian Marketplace - https://marketplace.atlassian.com/plugins/com.rublon.jira.plugins.twofactorauthentication (select \"Get it now\" button).\n* Log in into your Atlassian product as an administrator.\n* Click on the cog in top right corner and select \"Add-ons\".\n* Choose \"Manage add-ons\" in menu on the left.\n* Select \"Upload add-on\".\n* In the dialog select twofactorauthentication-x.x.x.jar file in \"From my computer\" area.\n* Click \"Update\" button in \"Upload add-on\" dialog.\n\nAfter installation process you'll see pop-up dialog with status. You could begin with plugin configuration after clicking on \"Get started\" button. To configure plugin correctly please read paragraph Configuration.\n\n## Configuration\n\nYou can configure Rublon Two-Factor Authentication (2FA) using plugin configuration page. In order to do it you need to: \n* Log in into your Atlassian product as an administrator. \n* Click cog in top right corner and select \"Add-ons\". \n* Choose \"Manage add-ons\" in menu on the left.\n* Find Rublon Two-Factor Authentication (2FA) plugin on the list, expand details by clicking on the arrow or plugin name and press \"Configure\". \n* On the page you will be asked to enter Secret Key and System Token - values you generated earlier in Rublon Admin Dashboard (see paragraph First steps).\n* After entering proper values you have to select \"On\" in \"Authentication method\" area and press the \"Save\" button.\n* After that you'll see information about your Rublon license type.\n\nIf any error will occur then Rublon protection will be automatically disabled (\"Authentication method\" will change to \"Off\").\n\n## Update\n\n* Log in into your Atlassian product as an administrator. \n* Click cog in top right corner and select \"Add-ons\". \n* Choose \"Manage add-ons\". \n* Type \"Rublon\" in search area and find \"Rublon Two-Factor Authentication (2FA)\" plugin on the list. \n* Select \"Update\" button if visible. If not then there's no update.\n\n## Disabling the plugin\n\nYou can deactivate Rublon Two-Factor Authentication (2FA) on the plugin configuration page (see Configuration paragraph) by changing \"Authentication method\" to \"Off\" and saving changes.\n\n## Useful links\n\n* [Rublon.com](https://rublon.com/)\n* [Rublon support](https://rublon.freshdesk.com/)\n* [Rublon Developer Area](https://developers.rublon.com/)\n* [Rublon Documentation](https://rublon.readme.io/)","excerpt":"","slug":"atlassian-products","type":"basic","title":"Atlassian products"}

Atlassian products


# Rublon Two Factor Authentication (2FA) for Atlassian products * * * ## Introduction ### About the Two Factor Authentication Two-factor authentication is a technology that allows identification of users involving two different components. We can split those components into two groups: "something that the user knows" and "something that the user possesses". It greatly improves the security because having access to only one of the factors is not enough to authenticate the user. The best example of everyday use are credit cards where you need the physical card (something that the user possesses) and PIN code (something that the user knows) to use it. Even if you have your card stolen from you, a thief is not too likely to know the PIN and therefore can't use your money. To improve security even further physical characteristic of the user (fingerprint, eye iris, voice) can be used as one of the factors. ### About the Rublon Rublon is a two-factor authentication solution that provides 2 types of second factor authentication. The first one is authentication via mobile phone by scanning QR code. Opposite to many similar solutions Rublon doesn't require entering one-time password generated and sended to your mobile phone. Rublon mobile application automatically connects to Rublon and authenticates the user based on the scanned QR code. The second option is authentication via e-mail address. It's less secure but is usable for users who for various reasons can't or don't want to authenticate with their mobile phones. In this case an e-mail is sent to the user and in up to 15 minutes user needs to confirm their identity by clicking the verification link. Rublon also allows to add the device you're currently logging in with to trusted devices list and in future proceed with verification without scanning QR code or clicking the verification link. It's useful for people who are the only users of Atlassian products on the particular device and don't want to perform additional steps while logging in. ### About the plugin Rublon Two-Factor Authentication (2FA) for Atlassian products is a plugin that provides the second factor of authentication often described as "something that the user possesses". In this case it is a mobile phone, which you use to scan a QR code. After scanning Rublon checks if user used the correct device. If the device matches to the one stored in database, user is getting authenticated. The first factor (something that the user knows) is handled by Seraph Authenticator (default authenticator for Atlassian products). The second factor is provided by a custom filter, called just after the original Atlassian products security filter. All communication between client and server in Atlassian products goes through it. ## Supported Atlassian products * JIRA * Confluence * Bamboo If you cannot find the application you are using on the list contact support. ## First steps To start using the Rublon Two-Factor Authentication (2FA) plugin for Atlassian products you should: * Install the Rublon mobile app on your smartphone, create a new account and confirm your e-mail address. * Visit the Rublon Admin Dashboard at www.admin.rublon.com, log in and scan the QR code that will appear using the Rublon mobile app. * Go to the "Add application" form (select Applications -> Protect an Application in menu bar) and fill in the required fields. If you can't find your product on the "Application type" list then select "Custom integration using Java SDK". * Copy the provided system token and secret key, which will be used to identify the integrated system and verify the authenticity and integrity of the messages exchanged with Rublon API (you will need it later while configuring plugin). ## Installation * Log in into your Atlassian product as an administrator. * Click cog in top right corner and select "Add-ons". * Choose "Find new add-ons". * Type "Rublon" in search area and find "Rublon Two-Factor Authentication (2FA)" plugin on the list. * Select "Install" button. If you can't find the plugin in "Find new add-ons" area then you should: * Download plugin file from Atlassian Marketplace - https://marketplace.atlassian.com/plugins/com.rublon.jira.plugins.twofactorauthentication (select "Get it now" button). * Log in into your Atlassian product as an administrator. * Click on the cog in top right corner and select "Add-ons". * Choose "Manage add-ons" in menu on the left. * Select "Upload add-on". * In the dialog select twofactorauthentication-x.x.x.jar file in "From my computer" area. * Click "Update" button in "Upload add-on" dialog. After installation process you'll see pop-up dialog with status. You could begin with plugin configuration after clicking on "Get started" button. To configure plugin correctly please read paragraph Configuration. ## Configuration You can configure Rublon Two-Factor Authentication (2FA) using plugin configuration page. In order to do it you need to: * Log in into your Atlassian product as an administrator. * Click cog in top right corner and select "Add-ons". * Choose "Manage add-ons" in menu on the left. * Find Rublon Two-Factor Authentication (2FA) plugin on the list, expand details by clicking on the arrow or plugin name and press "Configure". * On the page you will be asked to enter Secret Key and System Token - values you generated earlier in Rublon Admin Dashboard (see paragraph First steps). * After entering proper values you have to select "On" in "Authentication method" area and press the "Save" button. * After that you'll see information about your Rublon license type. If any error will occur then Rublon protection will be automatically disabled ("Authentication method" will change to "Off"). ## Update * Log in into your Atlassian product as an administrator. * Click cog in top right corner and select "Add-ons". * Choose "Manage add-ons". * Type "Rublon" in search area and find "Rublon Two-Factor Authentication (2FA)" plugin on the list. * Select "Update" button if visible. If not then there's no update. ## Disabling the plugin You can deactivate Rublon Two-Factor Authentication (2FA) on the plugin configuration page (see Configuration paragraph) by changing "Authentication method" to "Off" and saving changes. ## Useful links * [Rublon.com](https://rublon.com/) * [Rublon support](https://rublon.freshdesk.com/) * [Rublon Developer Area](https://developers.rublon.com/) * [Rublon Documentation](https://rublon.readme.io/)