Security settings

#Where they live

Access and session controls are under Settings → System Configuration → Security & Access. The controls below are available on Business Premium and Enterprise; all plans can set a session timeout under general settings.

#What you can control

• IP allowlisting — restrict console access to specific networks or addresses (for example, your admin VPN range).
• Session controls — session timeout and related session-security settings.
• Default sign-in method — choose what the sign-in screen offers (local, LDAP, or SSO).
• Force SSO — require standard users to authenticate through your identity provider, keeping an administrator recovery path.

#Recommendations

• Reach the console only from admin networks or VPN; enable IP allowlisting where available.
• Use short session timeouts on shared or sensitive environments.
• Keep a local administrator recovery account when enabling directory or SSO sign-in.
• Review these settings the way you'd review firewall rules — they're security-sensitive.