Enable policy based session access for mobile
Use the The Zero Trust- Policy Based Session Access plugin to control if users authenticating through a mobile app will have their roles reduced.
The Zero Trust - Policy Based Session Access plugin allows security admins to reduce user access in a session based on IP, Location, Identity provider attributes and user attributes using adaptive authentication policies. When this property is set to true, then users logging in via mobile device will have their roles restricted as configured by the plugin policies.
Set the Glide Property glide.authenticate.session_access.mobile.enabled to true.
More information
| Attribute | Description |
|---|---|
| Configuration name | glide.authenticate.session_access.mobile.enabled |
| Configuration type | System Properties \(/sys\_properties\_list.do\) |
| Data type | Boolean |
| Recommended value | true |
| Default value | <none> |
| Fallback value | true |
| Category | Access control |
| Security risk | - Severity score: 4.7 - CVSS rating: Medium - Security risk details: Instance admins may wish to restrict high privileged access when users login via mobile device, possible indicating an unsafe environment for sensitive operations. |
| Functional impact | None |
| Dependencies and prerequisites | None |
Parent Topic:Access control