Skip to main content
Closed

[Security/RISK] Implement IP Access List Restrictions

Related products:Authentication and Access Management
  • September 26, 2024
  • 1 reply
  • 21 views

Andre Alves
MVP
Forum|alt.badge.img+14

It would be beneficial to implement IP access list restrictions for Cognite projects/accounts. This would enable configuration of IP access lists to ensure that users can only connect through secure, predefined corporate networks.

For instance, users could be required to connect via the corporate network or an authorized internal VPN. Remote or traveling users could utilize the VPN to securely access the network. If an attempt is made to connect from an unsecured location, such as a public Wi-Fi in a coffee shop, access would be automatically blocked, enhancing security

1 reply

Sunil Krishnamoorthy
Seasoned Practitioner
Forum|alt.badge.img

Hi @Andre Alves,

At Cognite, we always federate user authentication to the customer's identity provider (IdP). Access to data in CDF is strictly determined by whether the customer's IdP provides a valid access token during a user’s login.  The same applies to service principals.

If you want to restrict access to data in CDF based on a specific set of IPs , we recommend setting up conditional access policies in your IdP (example: Azure Entra ID). 

Thanks!

Sunil