Is there support in the pulumi web portal for 2FA?
# general
g
Is there support in the pulumi web portal for 2FA?
w
For email login, not currently. But if you use GitHub login or SAML login you can require 2FA via those identity providers.
g
I was trying to use bitbucket membership requirements, but it doesn't seem to actually use bitbucket to login
w
Yeah - the "bitbucket" login is via Atlassian identity, not BitBucket specifically. If you have https://support.atlassian.com/security-and-access-policies/docs/enforce-two-step-verification/ configured on your Atlassian account then access to Pulumi should be gated through that 2FA requirement.
g
@white-balloon-205 It seems like that simply enforces that they are members, not that they actually authenticate via atlassian
e.g. I can still log into pulumi using my pulumi username / password even though it requires bitbucket membership
Is that correct?
Debating if we want to just migrate to a S3 backend to enforce 2FA to the data. It seems like that's the only option?