Add OTP configuration in global settings option, admin has three possibilities:

• enable (allow to change on definition/approval levels)

• force enable (can not be change on definition/approval levels)

• disable (default)

On definition level:

• when enabled globally it can be disabled

• when force enabled globally it can not be changed

• when disabled globally it can not be enabled

On approval (issue/page) level:

• when enabled for definition it can be disabled

• when force enabled for definition it can not be changed

• when disabled for definition it can not be enabled

How to send OTP

• Jira use selected notification mechanism

• Confluence send direct mail

• External users send direct mail

When OTP is enabled, user must confirm his decision by entering the code sent to the email.

Without providing the code, or in case of providing an incorrect one, a decision cannot be made.