Portal access
Workspace users have admin or viewer roles. Admins manage workspace settings; viewers use the permitted viewing functions. Platform administration is a separate role for operating the service across tenants.
Optional IP restrictions
A tenant can use one shared allowlist of IPv4, IPv6 and CIDR ranges for its portal users, including admins and viewers. The policy applies to SSO sign-ins and existing sessions as well as password sign-ins. Platform administrators can manage tenant policies.
Single sign-on
Workspace administrators can configure SAML or OIDC single sign-on. The Security section groups IP restrictions, Users and SSO settings.
Keep an allowed route available
Before enabling an IP policy, include the network you will use to access the portal. Some policy changes require a recent sign-in. If access is blocked, connect from an allowed network or contact your workspace administrator.
Security questions
For deployment or security requirements, use Talk to us on the homepage. This page describes implemented portal controls; it does not assert an external certification or compliance attestation.