Restrict Access to IDI Platform Environments by Allowed IP Addresses

Settings in Security let you specify a pre-defined list of allowed IP addresses to restrict access to IDI web modules (Customer Care, Orders, Workflow, etc…). Only users from an allowed IP address will have access to the web modules. This helps ensure your employees or contractors are only accessing IDI platform environments from networks, work spaces, and computers that have proper security controls in place.

You can bypass this restriction for certain power users as appropriate for your organization. For example, you may want to let trusted associates that travel frequently to access web modules from IP addresses not included in the allowed list.

Setup for IDI Platform Users

Access to required setup in Security requires Manage Domain permission. Users with this permission can:

• Set up and manage allowed IP addresses

• Exempt certain users from the allowed IP address restriction on an individual user basis

Creating the List of Allowed IP Addresses

Lists are created on a Domain/Environment basis.

• From the Apps tray, select POLICY > Domains.

  

• On the Domain page, navigate to the applicable domain. Then set up and enable one or more lists in the Use IP Allow List section.

  

• Start by selecting one or more environments. Click APPLY to apply your selections. You’ll be prompted to confirm your selections. Click OK (or CANCEL) as needed.

  

• Then specify one or more IP Address ranges.

  Note:

  At least one range must be specified before you can enable (use) this functionality. To add IP address ranges:

• Click the Add button (blue + icon) on the far right side of the Use IP Allow List.

  

• In the Add dialog enter the Start and End values for the IP Address range. Note: Enter values in IPv4 format. Click SAVE when you’re done.

  

• Add more ranges as needed.

• When you’re finished specifying ranges and ready to enforce the IP address restrictions click ENABLE. You’ll be prompted to confirm this action. Click OK (or CANCEL) as needed.

  

Note:

Once enabled, the label on the button changes to DISABLE to let you disable the restrictions if needed.

Managing Allowed IP Address Lists

You can edit or delete a selected IP address range using the associated Edit (pencil) and Delete (red X) icons at the far right. On Delete actions, you’ll be prompted to confirm. Click OK (or CANCEL) as needed.

You can also disable all restrictions if needed by clicking DISABLE. You’ll be prompted to confirm the action. Click OK (or CANCEL) as needed.

Exempting Users from the Allowed IP Address Restriction

You may need to let certain power users access web modules from IP addresses not included in an allowed list. This is done on an individual user basis via the Users page.

• From the Apps tray select USER > Users.

  

• On the Users page, navigate to the applicable user. Then, in the Account Settings section, click the EDIT button to enable the settings and toggle the Bypass IP Allow List check box as needed.

  

IDI Setup

Note:

This functionality is only available to authorized IDI associates. It’s needed to let those associates and applicable IDI processes login on behalf of a user where the request originates from an IDI IP address. This setup requires Manage Companies permission.

From the Apps tray, select SYSTEM > Global IP Allow List.

This page lets authorized IDI associates set up one or more lists of allowed IDI IP addresses.