CAC/PIV © Authenticator for Jira
CAC/PIV authentication and single sign-on for Jira.
Goldfinger Holdings, Inc.Adds two-factor authentication to Bitbucket using a mobile authenticator and time-limited PIN codes.

Adds two-factor login to Bitbucket alongside username and password authentication. A registered mobile device generates a PIN code that remains valid for half a minute at each login. The add-on works with authenticator apps compliant with RFC 6238 and does not require communication with a third-party system over the internet.
Requires a username, password, and code from a registered mobile device when logging in to Bitbucket.
Generates PIN codes on a mobile device that are valid for half a minute.
Supports authenticator apps compliant with RFC 6238.
Secure Login (2FA) for Bitbucket is listed as paid and supports data-center and server deployment, while CAC/PIV © Authenticator for Jira is also paid and supports data-center, cloud, and server deployment. This listing was updated in Sep 2026, compared with Apr 2024 for CAC/PIV © Authenticator for Jira.
| Name | Pricing | Deployment | Updated |
|---|---|---|---|
| this plugin | Paid | Data Center · Server | |
| CAC/PIV © Authenticator for Jira | Paid | Cloud · Data Center · Server |
50 plugins in Bitbucket · Security and compliance
Price distribution: 19 free, 31 paid
CAC/PIV authentication and single sign-on for Jira.
Goldfinger Holdings, Inc.Migrates Bitbucket Server or Data Center repositories, pull requests, and users to Bitbucket Cloud.
AtlassianManage Bitbucket users by deactivating inactive accounts, activating or deleting users in bulk, and filtering accounts.
miniOrangeSynchronizes Bitbucket users, groups, and directories with identity providers through SCIM and APIs.
miniOrange«this is not a strong authentication as both values can be easily passed/copied to other persons using them in parallel to the owner. A secure login depends on multiple aspects and combine e.g. knowledge with physical gadgets, which cannot be duplicated that easily. If the gadget will be stolen, it is useless without …»