Mobile app login does not work with Secure Login
Problem
Users are unable to log in to Atlassian products using the official Atlassian mobile apps (Jira or Confluence). Login attempts might fail during authentication. This behavior is typically observed after upgrading Jira, Confluence or Secure Login (or changing authentication-related settings) and can affect all mobile devices.
Cause
Secure Login distinguishes between browser-based authentication and mobile app authentication. Mobile apps use a dedicated authentication experience that is handled differently from standard web logins.
Depending on the Data Center version and configuration:
Mobile authentication may be intentionally restricted by your administrator
Legacy mobile login support may be disabled
As a result, mobile login attempts can fail even though browser-based login continues to work as expected.
Solution
Use the tables below to identify the most common reasons why login via Atlassian mobile apps does not work when Secure Login is installed.
Jira
Jira version | Secure Login Version | Mobile app support | Details |
|---|---|---|---|
9.16.0 - 10.1.x | 3.4.0.x | Yes | Vulnerable Secure Login Version! |
>= 3.5.0.0 | Yes (by default) |
| |
10.2.0 - 10.7.x | 3.4.0.x | Yes (by bypassing two-factor authentication) | Vulnerable Secure Login Version! |
>= 3.5.0.0 | Yes (needs admin action) | Mobile app login is blocked by default since it is not compatible with the New login experience by Atlassian. Mobile app login can be (re-)enabled by setting the JVM system property for legacy login mode to true: -Datlassian.authentication.legacy.mode=true | |
>= 11 | not (yet) supported | - |
|
Confluence
Confluence version | Secure Login Version | Mobile app support | Details |
|---|---|---|---|
9.0.x | 3.4.0.x | Yes | Vulnerable Secure Login Version! |
>= 3.5.0.0 | Yes (by default) |
| |
9.1.0 - 9.5.x | 3.4.0.x | Yes (by bypassing two-factor authentication) | Vulnerable Secure Login Version! |
>= 3.5.0.0 | Yes (needs admin action) | Mobile app login is disabled by default since it is not compatible with the New login experience by Atlassian. Mobile app login can be (re-)enabled by setting the JVM system property for legacy login mode to true: -Datlassian.authentication.legacy.mode=true | |
>= 10 | not (yet) supported | - | - |
Bitbucket
There is no Atlassian Bitbucket mobile app.