Restricting access to the Forgot Password page

[Anthony]

Hello,

We want to restrict access to the Forgot Password page from off our corporate network.  Is IP Allow Lists an option to accomplish this?

Thank you.

[rushikeshvartak]

Yes, using IP Allow Lists is an effective option to restrict access to the Forgot Password page in Saviynt from outside your corporate network.

By configuring an IP Allow List, you can specify a range of trusted IP addresses (such as those from your corporate network) that are permitted to access certain resources or pages, including the Forgot Password page. Any requests originating from IP addresses outside this list can be blocked or redirected, ensuring that only users within your corporate network can access the page.

To set this up, you would typically:

1. Create an IP Allow List: Define the IP addresses or IP ranges allowed to access the Forgot Password page.

2. Apply the IP restriction: Use this IP Allow List in your configuration settings to limit access to the page.

3. Configure access settings: Ensure that the appropriate security settings are applied within your identity management system or web server to enforce these IP-based restrictions.

This approach enhances security by preventing external unauthorized users from attempting to reset passwords outside of your network.