IP-Based Access Restrictions for Users

With the new IP-Based Access Restriction setting, you can now limit access to your application by specifying trusted IP addresses or IP ranges. This ensures that only users connecting from authorized locations—such as your corporate network—can reach your organization’s resources within our platform.

This feature is ideal for organizations looking to tighten control over who can access sensitive data, reinforce compliance, and prevent unauthorized use.

Key Benefits

• Enhanced Security: Prevent unauthorized access by allowing only users from approved IPs or office networks.
• Stronger Compliance: Align access control with your internal IT and data protection policies.
• Focused Access Control: Ensure that users accessing your tenant are verified and coming from expected environments.

How It Works?

Admins can set IP restrictions from the project settings panel. Just add the allowed IP addresses or ranges, and access from all other sources will be blocked automatically.
Users attempting to connect from an unapproved IP will receive a customizable access denied message. This restriction applies across all access points that requires authentication to your project, including: Access to management application, forms that requires user authentication, tasks and agent view.

Setup

Login to console. Make sure you have the right project selected and click on “projects” icon at the sidebar.

Locate “Security” pane and scroll to “IP address whitelist”.

Enter IP or CIDR (IP range) and click save

Notes

1. SSO integration: With SSO integration, be advised that if the SSO is configured “Use on company level” then all projects in the company will carry the IP restriction. In case you need separation such as Project A will have IP restriction but project B will not than you will need to define separate SSO for each project and respective IP restriction as you require
2. When a fault restricted login attempt is made we do not disclose data regards the nature of restriction. The user experience is the nothing happens on screen or empty views or infinite redirect loop.