Two Factor Authentication (2FA) for Bitbucket

Two Factor Authentication (2FA) for the Bitbucket app, gives the ability to enable 2FA for Bitbucket Software and Bitbucket Service-Desk. Bitbucket Software and Bitbucket Service-Desk are compatible with all Authenticator Apps. Here we will go through a guide to configure 2FA between Bitbucket and Google Authenticator. By the end of this guide, Bitbucket users should be able to log in and register to Bitbucket Software with the second factor of Authentication.

Pre-requisites

To configure Two-Factor Authentication for Bitbucket, you need the following items:

  • Bitbucket should be installed and configured (supported version Bitbucket Server 5.5.0 - 6.10.1, Bitbucket Data Center 5.5.0 - 6.10.1 ).
  • Admin credentials are set up in Bitbucket.
  • Valid Bitbucket Server or Data center Licence.

Download And Installation

  • Log into your Bitbucket instance as an admin.
  • Navigate to the settings menu and Click Manage Apps.
  • Click Find new apps or Find new add-ons from the left-hand side of the page.
  • Locate Two-factor Authentication(2FA) for Bitbucket, Bitbucket 2FA via search.
  • Click Try free to begin a new trial or Buy now to purchase a license for Two-factor Authentication(2FA) for Bitbucket.
  • Enter your information and click Generate license when redirected to MyAtlassian.
  • Click Apply license.
Two Factor Authentication (2FA) for Bitbucket

Step 1: Setup miniOrange 2-Factor Authentication

  • Navigate to Two Factor Settings(2FA/TFA) tab.
  • Two factor Authentication (2FA) for Bitbucket
  • Enable 2-Factor Authentication: For Enabling 2FA for users click on 'Enable the 2 Factor Authentication' for Bitbucket users & click on Save.
  • Two factor Authentication (2FA) for Bitbucket
  • Enable Backup Method: For Enabling the Security Question as Backup Method in case of an emergency login, click on 'Enable Backup Method' and select 'Security Questions'(the User need to configure unique security questions)
  • Two factor Authentication (2FA) for Bitbucket
  • Allowing 2-Factor Authentication for users: For enabling 2FA for users, navigate to 'User Management' tab, where you can see the list of all the active users, and all 2FA operations can be performed on these active users.

    Note: 2FA for all the users is disabled by default, you need to manually enable 2FA for all the users.

  • Two factor Authentication (2FA) for Bitbucket
  • 2FA for Users: Enter the name of the user in the Search Bar for whom you want to perform the operation and hit the search button, the user with that name will appear. And then in the Action column, select the required Action.
  • Two factor Authentication (2FA) for Bitbucket
  • 2FA for Groups: Enter the name of the group in the Search Bar for which you want to perform the operation, and hit the search button, the group with that name will appear. And in the Action column, select the required Action.

    Note: In future, if users get added to this group, 2FA will be enabled for them by default.

  • Two factor Authentication (2FA) for Bitbucket

Step 2: How the user can Configure the 2FA

  • Welcome Message for users: The following screen will be shown to users after enabling 2FA for a particular user.
  • Two factor Authentication (2FA) for Bitbucket
  • Configure the Google Authenticator app: Once the user clicks Next, the Google Authenticator setup screen will be shown. You can configure the Google Authenticator by 2-ways.
    1. Scan QR code : The user needs to scan the QR code and then enter the 6 digit OTP.

    Two factor Authentication (2FA) for Bitbucket
    2. Enter Secret Key : Click on Problems with QR Code? User need to enter the secret Key in Google Authenticator app and then enter the 6 digit OTP in plugin.

  • Two factor Authentication (2FA) for Bitbucket
  • Configure the backup Method: Once Google Authenticator is configured successfully & if the Backup method is activated, the user will see the screen below where the user needs to configure the Security Question based on his knowledge.
  • Two factor Authentication (2FA) for Bitbucket

Step 3: Additional Features

  • TOTP Settings: Customized label can be given to the Authenticator app. Enter the 'Name' for your authenticator app in the text box.
  • Two factor Authentication (2FA) for Bitbucket
  • Remember My Device: It allows the user to ignore the 2FA check when trying to log in from the same device. Enable the checkbox for 'Remember My Device' feature, and in 'Expiry Time (in Days)' section enter the number of days for which the remember my device settings will be saved.
  • Two factor Authentication (2FA) for Bitbucket
  • Brute Force Configuration: It is used for restricting the access to your Bitbucket Application based on the number of Invalid Login Attempts for the specified period of time. For enabling Brute Force Configuration, click on the 'Enable Brute Force Protection for Bitbucket' checkbox, then select the number of invalid login attempts after which user will lock, and the time for which the user will be in a locked state and won't get access to Bitbucket application
  • Two factor Authentication (2FA) for Bitbucket

Step 4: User Management

  • 2FA for Single User: Enter the name of the user in the Search Bar for whom you want to perform the operation and hit the search button, the user with that name will appear. And then in the Action column, select the required Action.
  • Two factor Authentication (2FA) for Bitbucket
  • 2FA for Multiple Users: Select the users, in the Bulk 2FA Action drop-down list select the action you want to perform. And then hit Apply Button.
  • Two factor Authentication (2FA) for Bitbucket
  • 2FA for All Users: In Bulk 2FA Action Dropdown list under All users Section select necessary Action and hit Apply Button.
  • Two factor Authentication (2FA) for Bitbucket
  • 2FA for Single Group: Enter the name of the group in the Search Bar for which you want to perform the operation and hit the search button, the group with that name will appear. And then in the Action column, select the required Action.
  • Two factor Authentication (2FA) for Bitbucket
  • 2FA for Multiple Groups: Select the Groups, in the Bulk 2FA Action drop-down list select the action you want to perform. And then hit Apply Button.
  • Two factor Authentication (2FA) for Bitbucket

Step 5: Adaptive Authentication

  • IP Whitelisting: It is a security feature that is often used for trusted users who can directly log into Bitbucket without asking for 2FA. Enter the IP address and click save for enabling the IP whitelisting
  • Two factor Authentication (2FA) for Bitbucket
  • IP Blocking: It is a basic access control mechanism that blocks access to Bitbucket Application based on the IP address. It will deny access for those IPs which are listed here. Enter the IP address in the text box for IP blocking. The message for this blocked users can be customized, enter the message in the 'Blocked User Message' text box and click on save button.
  • Two factor Authentication (2FA) for Bitbucket

Step 6: Reconfigure 2FA

  • Reconfigure 2FA: For reconfiguring 2FA for end-user, navigate to User Profile click on Two-factor Authentication, you can see the Configure Two Factor(2FA) window, now click on Reset button to Reconfigure the Authenticator or Backup method.
  • Two factor Authentication (2FA) for Bitbucket



If you are looking for anything which you cannot find, please drop us an email on info@xecurify.com