Organization administration · Security policies
MFA, access and sessions in one place
Proposed interface concept Not released. A design for discussion, drawn in HTML and CSS; not a screenshot of working software.
Security policy for an organization: MFA enforcement and enrollment, access rules such as requiring MFA outside the office network or blocking legacy protocols, session length and idle timeout, role permissions, recent audit events and alerts. Email threat filtering through MailThreatZero is shown as an optional integration. The figures shown are example data.
Proposed interface concept Not released · example data · subject to change
Enrolled46 of 48 people
Authenticator app 31Security key 15SMS not allowed
- JMJorge MedinaNot enrolled · grace period ends 19 NovSend reminder
- HCHannah ColeInvited · enrolls at first sign-inResend invite
- 5 failed sign-ins for sam.ortega, new countryToday 11:12 · account locked automaticallyReview
- Mail forwarding to an outside addressdana.whitlock · rule created 09:30Review
- Admin role granted to Tom HaddadConfirmed by Maya Okafor · yesterday
| Policy | Applies to | When | Then | State |
|---|---|---|---|---|
| Require MFA outside the office networkAsk for MFA every sign-in | All users | Sign-in from outside “Office” (203.0.113.0/24) | Ask for MFA every sign-in | On |
| Block legacy protocolsBlock · app passwords not allowed | All users | IMAP, POP or SMTP with a password only | Block · app passwords not allowed | On |
| Security key for administratorsRequire a security key | Admin roles | Any admin sign-in | Require a security key | On |
| Sign-in from a new countryRequire MFA and notify admins | All users | Country not seen for this person in 90 days | Require MFA and notify admins | Report only |
- Organization adminEverything, including billing and export1
- Helpdesk adminPasswords, MFA resets, mailboxes1
- Security readerAudit log and alerts, read only1
- Ridgeline IT techniciansDelegated by your MSP · no access to content3
- 11:12Account locked: sam.ortegaBy policy · 5 failed sign-ins
- 10:41MFA reset for priya.nairRosa Valdez, Ridgeline IT
- 09:30Forwarding rule createddana.whitlock
- 08:05Policy set to report only“Sign-in from a new country” · Maya Okafor
MailThreatZeroOptional integrationNot connected
Optional email threat filtering in front of your mailboxes. Not required: built-in spam and malware filtering stays on either way.
Shape this before it is built
This screen is a proposal. Register interest to follow development and test early releases, or help build it.