To configure the policy of Kepler - Multi-Factor Authentification:
- Go to Manage apps.
Within the dashboard on the left, identify and select the "Kepler Multi-Factor Authentication" plugin.
- This will lead you to the "General Configuration" area.
In this page, you have the parameters for configurate MFA. The input configuration details are as follows:
- User Groups: Here, you'll specify which groups or categories of users will require MFA. Input the relevant group names or identifiers to ensure the correct users are targeted. You can add multiple groups with the comma separator ','.
- Authentication Attempts: This setting determines how many times a user can try to authenticate before being locked out. Set a number that balances security with user experience.
HTML Email Template: This is where you craft the message that users will receive when prompted for MFA. Design it to be clear and actionable.
Enabled MFA: Enable MFA policy on selected groups. If this toggle button is disabled, the MFA will not be applied.
Jira Administartor
Provide two administration accounts to avoid deadlock.
Jira Administartor
You need to be careful with the admin account. If your admin account is blocked by MFA, you will have no way to unblock your users.
Jira User Groups
Pay attention to the use of subgroups in the Jira system.
Template HTML
In your email template, it's imperative to include the placeholders ##username## and ##code##.
A simple suggested format might be:
For secure access, please use the following MFA code: ##code##.
Cheers.
4. To finalize the setup and after ensuring all details have been correctly entered, click on the "Save" button to commit the changes. The setup process is now complete.
As a result, MFA is successfully enabled for all users in the mentioned groups.
MFA in Mobile version
To secure your MFA in mobile version, please refer to Mobile Version section.