Confidence Competence Innovation. Secure Login for Jira. User's Guide

Transcription

1 Confidence Competence Innovation Secure Login for Jira User's Guide

2 Target Audience This User's Guide is targeted to JIRA users who are working with our secure log- in solution. Motivation Because the default log- in for Atlassian tools like JIRA is not secure enough for higher security demands, SYRACOM develops a more secure solution for JIRA: a mobile phone 2- factor authentication. This 2- factor authentication is using the combination of the user name and password as a first factor and an additional key code (PIN) as a second factor. This PIN is generated by an app on a mobile device and will be changed every minute. Synomously, the PIN is also called one- time password (OTP), because it will be only used once. Initially, the mobile app has to be connected with the user's identity by scanning a QR- code generated by the web app. Prerequisites To use strong security, the SYRACOM add- on has to be installed and activated as described in our Administrator's Guide. Furthermore you must have an authenticator app installed on your preferred mobile device. You can use every app which is compliant to the RFC 6238 standard. Please find enclosed a list of examples for different mobile phones as well as operation systems: Apple iphone / ipad Authy: Duo Mobile: mobile/id Free OTP: authenticator/id ?mt=8 Google Authenticator: authenticator/id ?mt=8 Toopher: Apple iwatch Authy: Google Android Authy: Duo Mobile: Free OTP: Google Authenticator: Toopher: 2

3 Windows Phone Authenticator: us/store/app/authenticator/021dd79f e b- 78e7d1fa76f8 Duo Mobile: phone- 7 BlackBerry Duo Mobile: Google Authenticator: Initial Log- in and Registration 1. If not already installed, please install a RFC 6238 compliant authenticator app on your mobile device (see related links above). 2. Please log- in to JIRA with your user name and password (figure 1). Figure 1. Enter your user name and password in the respective fields of the JIRA log- in dialog. 3

4 3. After the log- in procedure, a QR- code will be displayed to connect your mobile device with your JIRA account (figure 2). Please use your installed authenticator app on your mobile device to scan this QR- code. If the scan is completed (figure 3), please click on the button Enter PIN to proceed. Figure 2. The add- on displayes a QR- code. 4

5 Figure 3. The QR- code is scanned by the authenticator app. The application on your mobile creates a key (PIN) for your log- in to JIRA automatically (figure 4). Figure 4. The authenticator app displayes a key (PIN ). 5

6 4. After you have scanned the QR- code and pressed Enter PIN (see figure 2), the final authentication dialog will be shown (see figure 5 below). 5. Enter the key (PIN) from your authenticator app in the field Pin and click Login to complete the log- in procedure. Figure 5. After entering the key, please press the Login button to complete the log- in procedure. If you don't want to log- in and press the button Cancel you will be logged out from JIRA. 6

7 Hints Please be careful how many accounts you have created on the mobile device. If you create for any reason another account on your mobile device, some authenticator apps create a different new account whrereas other authenticator apps override the old account with the new account. For example if you use Google authenticator on your iphone device every time when you scan the QR code a different new account will be created on your mobile device (see figure 6 below). You have to know that only the last generated key code works for your log- in to JIRA. Figure 6. If you have created a duplicated account, please note that only the last account is valid for your log- in to JIRA. 7

8 If you use FreeOTP authenticator on your iphone device every time when you scan the QR code the old account will be replaced by new account. In this case you must either delete the old account or rename it. Then your PIN will be work to log- in to JIRA. Figure 7. Rename and delete an account with FreeOTP 8

9 Standard Login Procedure After the initial log- in procedure and the registration for your account, you can use the generated key from your mobile device whenever you log- in to JIRA. Please note that the key will be changed every 30 seconds. 1. Please log- in to JIRA with your user name and password. Figure 8. The standard JIRA log- in dialog 2. Open your authenticator app on your mobile device (figure 9 below). Figure 9. The authenticator app with a displayed key (PIN) 9

10 3. After the standard log- in your web browser will display a SecureLogin page (figure 10). Please enter the PIN from your authenticator app in the field Pin and click Login. Figure 10. To complete the log- in enter the PIN in the field with the name and press login 4. Congratulations! You have logged in to JIRA using the 2- factor authentication successfully. 10