VA CCP Alert: Atlassian 2FA, 7 NOV

Veterans Health Administration sent this bulletin at 10/27/2022 11:21 AM EDT
v a mobile updates

VA Connected Care Platform (CCP) Alert: Atlassian 2FA, 7 NOV

On Monday, 7 NOV 2022 Connected Care Platform will require 2 Factor Authentication (2FA) to access the Atlassian Tool Suite within the VAEC MAP environment. This allows a more secure Tool Suite external to the VA network. This new policy will impact the tools listed below: 

- JIRA (https://issues.mobilehealth.va.gov)

- Bitbucket (https://coderepo.mobilehealth.va.gov)

- Confluence (https://wiki.mobilehealth.va.gov)

- Crowd (https://crowd.mobilehealth.va.gov/crowd/)

Next Steps

  • On 7 NOV 2022, all users will be required to use 2FA. Please review the Atlassian 2FA Guide (also attached) before 7 NOV 2022 so you know what to expect and how to login.
  • For Developers using Git to clone repositories for remote changes and to pull/push commits: 2FA use will require use of a Personal Access Token. Please review the 2 Factor Authentication - Bitbucket Personal Access Token Use Guide (also attached) with instructions for setting up a Personal Access Token. This is available now to enable in advance of the 7 NOV date.
  • A number of Service Accounts have been exempt from this policy change. Those are listed in [CCPCPT-1021] Exempt Crowd Service Accounts for reference. If you are aware of a service account that requires an exemption that is not listed, please reach out to Jonathan Carter (jonathan.carter5@va.gov).

Questions? Reach out to us in the #ccp-cm channel in the VA PPG team slack or via email to jonathan.carter5@va.gov.

For more information or to view the archive of these past notifications, please visit the VA Mobile Alerts RSS Feed. To subscribe or unsubscribe to this internal alert, please go to the VA Mobile Alerts edit subscription page.*** 

For more help with subscriptions to these alerts, go to the VA Mobile Alerts wiki page.

***If you are using Outlook be sure to add veteranshealth@public.govdelivery.com to your Safe Senders list. To add a sender to the list, under Safe Senders List, click in the text box, type an email address or domain, and then click Add.