Securing Your Organization

Choose the controls that protect your organization’s resources: who can connect, what they can do during a session, and how to trace what happened.

Each control is configured where it applies, in the Organization menu or in a resource’s settings.

Control Who Connects

Verify identities and decide which connections need an approval.

SSO connectors
key

Let users sign in with their company identity provider.

Configure SSO
Two-factor authentication
phonelink_lock

Require two-factor authentication for all users of the organization.

Enforce 2FA
Approval workflow
approval

Have connections to sensitive resources approved by designated approvers.

Approval Workflow
Connection forms
fact_check

Ask users to justify each connection.

Connection Forms
Usage schedules
calendar_clock

Limit access to resources to defined time slots.

Configure Usage Schedules

Control What Users Can Do

Limit what users can do once connected, and who can administer what.

Session policies
content_paste_off

Restrict the clipboard and file transfers between users and remote devices.

Session Policies
Roles
admin_panel_settings

Give each user only the permissions they need, at organization or group level.

User Roles
Credentials
lock

Let users connect to resources without knowing their passwords.

Manage Credentials

Know What Happened

Audit connections, actions and access rights.

Security logs
history

Consult the security and administration actions performed in the organization.

Security Logs
Activity
list_alt

Consult the history of remote connections and export it as a CSV file.

Activity (Sessions)
Rights review
manage_search

Inspect who has access to each resource, and why.

Rights Review
Access requests
inbox

Follow the requests submitted for protected resources, and revoke access.

Access Requests
Alerting
notifications_active

Be notified of security events and follow each alert through to resolution.

Alerting