AC
Acme Co. ↓
Security
Authentication · SSO · session policy · device management
MFA enabled
6 / 8 members
SSO sessions (active)
4
Sign-ins (24h)
18
Failed attempts (24h)
2
Single sign-on
SAML 2.0 with Okta, Azure AD, Google Workspace, OneLogin, JumpCloud.
SSO with Okta
acme.okta.com · SCIM provisioning enabled
Require SSO for all members (except Owner)
SCIM auto-provisioning
Multi-factor auth
Required for Admin+ by default. Configurable per role.
Require MFA for Owner
Require MFA for Admin
Require MFA for Editor
Require MFA for Viewer
— ALLOWED FACTORS
Authenticator app (TOTP)
Hardware security key (WebAuthn)
Passkey (platform)
SMS · phone (legacy, not recommended)
Session policy
How long sessions stay valid and when re-auth is required.
Re-auth for sensitive actions (billing, API keys, member roles)
Lock workspace after 5 failed sign-ins
Concurrent session limit (per member)
IP allowlist
Restrict workspace access to specific networks (Enterprise only).
Enforce IP allowlist
| CIDR | Label | Added | |
|---|---|---|---|
| 10.20.30.0/24 | HQ office | Mar 12, 2026 | |
| 192.168.100.0/24 | Detroit annex | Apr 1, 2026 | |
| 52.84.0.0/16 | VPN exit · Cloudflare | May 2, 2026 |
Active sessions & devices
Sign out individual sessions or all at once.
| Member | Device | Location | Last active | |
|---|---|---|---|---|
| Alex Park | Chrome · macOS 14.6 | Detroit, MI · US | Now | current |
| Alex Park | Safari · iPhone (iOS 18.4) | Detroit, MI · US | 42m | |
| Mike Patel | Firefox · Windows 11 | Chicago, IL · US | 2h | |
| Casey Ng | Chrome · macOS 14.5 | Toronto · CA | 3h | |
| Tom Walsh | Chrome · iPad | Austin, TX · US | 8h |
Encryption & data residency
Where your data lives and how it's protected.
Encryption at restAES-256
Encryption in transitTLS 1.3
Customer-managed keys (CMK)Enterprise only
Data regionUS-East
BackupsDaily · 30-day retention
SOC 2 Type IIin progress
Security incidents
Recent flagged events on this workspace.
2 failed sign-ins · alex@acme.coresolved
Wrong password 2x then succeeded. IP unchanged. No action taken.
New device sign-in · Casey Ngacknowledged
Chrome on macOS · Toronto, CA · MFA verified. Member confirmed device.
API key rotated · Production · backendinfo
Manual rotation by Owner. Previous key revoked.