Saviynt IP Restriction for SSO and Local Authentication

[LokeshSoundar]

Hi,

We have configured SSO with Azure AD and have conditional access policy configured to restrict access via specific IPs when user login via SSO into Saviynt. We want to enable local authentication and restrict access to specific IPs as well. We want to understand if we request Saviynt DevOps to configure IP restriction, will it restrict only for local authentication or for SSO as well?

Thanks,

Lokesh

[nimitdave]

@LokeshSoundar , local login will only work for a particular login url and that will be accessible with a particular VPN only. Only saviynt support team will be able to login through that VPN.

So, are you looking for :

1. how to enable local auth and sso auth for specific users?

2. you are able to achieve 1 and looking to restrict login for those specific users from specific IPs?

[LokeshSoundar]

We want to enable local authentication for a couple of users to access from customer network. We understand from our earlier conversations with DevOps team that this can be configured. We want to restrict this local authentication to specific IPs. We already have IP restrictions if someone access through SSO using AAD conditional access policy. We want to restrict to those same IPs for local authentication as well.

Our query is that if Saviynt DevOps team configure those IP restriction in Saviynt side, will it be only for local authention URL or will it affect SSO as well?