Security settings
Tighten access to the console with IP allowlisting, session controls, default sign-in method, and Force SSO on Business and Enterprise.
Last updated September 17, 2026
#Where they live
IP allowlisting and advanced session controls are available on Business and Enterprise. Compare plans
Access and session controls are under Settings → System Configuration → Security & Access. Every plan keeps FileAgent's baseline protections — HTTPS, encrypted credential storage, secure session handling, and a session timeout under general settings — whether or not the advanced controls below are included.
#What you can control
- IP allowlisting — restrict console access to specific networks or addresses (for example, your admin VPN range).
- Session controls — session timeout and related session-security settings.
- Default sign-in method — choose what the sign-in screen offers (local, LDAP, or SSO).
- Force SSO — require standard users to authenticate through your identity provider, keeping an administrator recovery path.
#Recommendations
- Reach the console only from admin networks or VPN; enable IP allowlisting where available.
- Use short session timeouts on shared or sensitive environments.
- Keep a local administrator recovery account when enabling directory or SSO sign-in.
- Review these settings the way you'd review firewall rules — they're security-sensitive.