How to enable the resource "Conditional Access"?

Conditional Access is the add-on where you can limit user access via IP and region. This add-on helps your company implement controls where necessary to further extend the security of your organisation’s data.

IP Access Restriction and/or Region:

• IP/Region access restriction is done by verifying all user IPs per session on the platform, either via App or Desktop.
• Information about the User Region (specifically the country) is extracted on the basis of the IP (IP Geolocation lookup). All users are connected to an IP when logging in or logging out, triggering the IP/Region restriction.
• IP/Region restriction validates all rules registered by IP and/or Region and blocks access if the connection is restricted.
• Whenever there are changes to the restriction rules, all user sessions of the client are validated again, and if some are restricted, the respective sessions are revoked.
• When restricting by region, all IPs in the chosen region are blocked.

Device Approval:

• Device approval is done through the verification of user sessions on the platform, either through the application or desktop.
• Each time the user logs in, they create a new session. Therefore, the administrator must approve each new device.
• After the approval of a device, the user can unlock the session freely on that single device.

Impossible Travel

• If the feature is enabled on the account, the user's account will be automatically temporarily blocked if they log in from locations greater than 1000 KM apart within 1 hour.
• This is a suspicious activity that can compromise the security of the account, as it is unlikely for someone to travel such distances in such a short time.

How to enable it?

After acquiring the add-on, it is possible to configure it through the administration screen. It is important to note that only administrator profiles can make adjustments in the portal.

To do this, follow these steps.

• Click on your photo in the upper right corner and select the option: 'Administration';
• Select the section: 'IP/Region Restrictions';
•  Now just click the toggle switch to enable the restriction;
• When the toggle switch turns green you can start the configuration;
• It is divided into IP/Region allowed and blocked, and by clicking 'add', you can add the data you want to restrict or allow;
• Remember that the actions are only valid when they are published. Just click on 'Apply Restrictions'. 

For a better viewing and tracking of the process, watch the following video:

We hope you are enjoying our service and that you are finding the information you need in our help center. If you could rate our article, it would help us to understand how we can improve and provide an even better service.

At the end of the article, you will find the field “Was this article helpful?”, just click on the option you want: Yes or No

Thanks!