Uploaded image for project: 'Identity'
  1. Identity
  2. ID-6605

Allow users to login with First-Party Isolation (FPI) enabled in Firefox

XMLWordPrintable

    • Our product teams collect and evaluate feedback from a number of different sources. To learn more about how we use customer feedback in the planning process, check out our new feature policy.

      Problem Definition

      Users cannot log in to Atlassian Cloud using Mozilla Firefox web browser if First-Party Isolation (FPI) is enabled (privacy.firstparty.isolate=true). FPI is an optional privacy feature built-in to Firefox that enforces stricter security policies to block tracking between websites.

      Suggested Solution

      The log in for Atlassian Cloud should be run solely in Atlassian Cloud as FPI option does not allow authentication from other URLs other than the one where the user is trying to log in to.

      Workaround

      No workaround, Currently First-Party Isolation (FPI) must be disabled (privacy.firstparty.isolate=false)in the Firefox Settings

            [ID-6605] Allow users to login with First-Party Isolation (FPI) enabled in Firefox

            Aneita made changes -
            Resolution New: Fixed [ 1 ]
            Status Original: Gathering Interest [ 11772 ] New: Closed [ 6 ]

            Aneita added a comment -

            This issue has now been resolved. If you're still experiencing issues, please feel free to reopen this ticket.

            Aneita added a comment - This issue has now been resolved. If you're still experiencing issues, please feel free to reopen this ticket.
            Matthew Ho (Inactive) made changes -
            Assignee New: Aneita [ ayang@atlassian.com ]
            Matthew Ho (Inactive) made changes -
            Remote Link New: This issue links to "Page (Confluence)" [ 516570 ]

            radusw added a comment -

            @Aneita I've sent a recording to that e-mail address with the login issue I'm experiencing.

            radusw added a comment - @Aneita I've sent a recording to that e-mail address with the login issue I'm experiencing.

            radusw added a comment - - edited

            Actually, I don't think it's related to 3rd party cookies. I get into an infinite login loop when I try to log in.

            radusw added a comment - - edited Actually, I don't think it's related to 3rd party cookies. I get into an infinite login loop when I try to log in.

            Aneita added a comment -

            ecfe4c5910df do you mind sending me an email at ayang@atlassian.com so that we can discuss in a little more detail?

            I'd love to get some more info on which flow you're going through / which site you're trying to access etc. so that we can dig into this. A video of the flow might also help.

            Thanks!

            Aneita added a comment - ecfe4c5910df do you mind sending me an email at ayang@atlassian.com so that we can discuss in a little more detail? I'd love to get some more info on which flow you're going through / which site you're trying to access etc. so that we can dig into this. A video of the flow might also help. Thanks!

            ArchangeGabriel added a comment -

            That being said, this does not seem to be FPI anymore, since disabling it doesn’t solve the issue: I guess the new problem is that now third-party cookies are indeed forbidden, and that atlassian.net is using cookies from atlassian.com for authentification.

            ArchangeGabriel added a comment - That being said, this does not seem to be FPI anymore, since disabling it doesn’t solve the issue: I guess the new problem is that now third-party cookies are indeed forbidden, and that atlassian.net is using cookies from atlassian.com for authentification.

            ArchangeGabriel added a comment -

            For instance in my case, I try to connect to cgnsorg.atlassian.net.

            And I get the following message after dozens of redirections:
             
            Something has gone wrong
            Check that your browser allows third-party cookies and then try again using the button below (without refreshing the page):

            ArchangeGabriel added a comment - For instance in my case, I try to connect to cgnsorg.atlassian.net. And I get the following message after dozens of redirections:   Something has gone wrong Check that your browser allows third-party cookies and then try again using the button below (without refreshing the page):

            Aneita added a comment -

            Hey 86acf372db7f,

            We've actually resolved this issue but forgot to close this ticket. I just tried to reproduce this but was able to successfully login.

            Can you please confirm whether you're still having problems with logging in? If so, can you share some more info on what error you're seeing?

            I'll leave this ticket open until I hear back.

            Thanks,
            Aneita

            Aneita added a comment - Hey 86acf372db7f , We've actually resolved this issue but forgot to close this ticket. I just tried to reproduce this but was able to successfully login. Can you please confirm whether you're still having problems with logging in? If so, can you share some more info on what error you're seeing? I'll leave this ticket open until I hear back. Thanks, Aneita

              ayang@atlassian.com Aneita
              csmeureanu Catalina Smeureanu (Inactive)
              Votes:
              25 Vote for this issue
              Watchers:
              12 Start watching this issue

                Created:
                Updated:
                Resolved: