7 Portal

7.1 Access

At the time of licensing, you will receive a main login. From this main login, you can create multiple additional logins with limited access, such as access for an auditor or a manager. A login also grants rights to see the same data in the mobile app.

For all users, you can enable two factor authentication and single sign-on.

If you received an NFR license for a proof-of-concept project, and you later choose to license, this tenant instance will automatically roll on to become your commercially licensed tenant.

7.2 Single sign-on

We support single sign-on (SSO) for Office 365, Azure AD, ADFS, Okta and any SAML 2.0 identity provider. We recommend that you set up single sign-on because this ensures that you terminate access to the portal when employees leave the company.

Refer to Single Sign-on Setup for technical setup of SSO.

7.3 Availability

As described in Data Storage, we use Azure web servers in multiple continents in order to make sure we provide great performance anywhere in the world and that the portal is always up and running.

7.4 Denial of Service Protection

The portal is protected from Distributed Denial of Service (DDoS) attacks by Microsoft's Azure DDoS Protection.

Refer to What is Azure DDoS Protection? for more information.

Related FAQ

Can I add more IT people to approve requests and see the auditlog?

Yes. In the portal, you can create additional logins for more people. You can also define which roles they have, such as read-only view, whether or not they can edit settings, access to the audit log and if the person is allowed to approve requests.

In the portal, go to Logins > User Logins > New user.

Refer to Logins for more information.

How would I setup an external auditor?

You can create a portal user account that can see only the auditlog and, optionally, the inventory. No other data will be visible.

I'm an MSP – how can I give my customer a limited view?

To give a user a limited view within the portal, you simply create a user account that cannot approve requests. This way, your customer can see the data you choose without the ability to approve requests.

If you have on-premise remote gateways configured, you can also remove access to the portal entirely by limiting user access to those computers accessible via the relevant gateway. This is controlled in the admin portal under setting Logins > User Logins, EDIT or New user, tab ACCOUNT, heading Rights, field Limit to access.work.

NOTE

If you don't see field Limit to access.work, you have not yet configured an on-premise gateway.

What if I want a manager IT to approve some requests?

You can set a scope for portal logins to only see part of the data based on the end users or computers groups and/or Organizational Units.

For example, sales managers can be set up to only see users and computers in sales. They will then only get approval requests from their own staff. You can also set up a manager to not have approval ability, but only the ability to see the auditlog for his/her own staff.

What is Vendor Access?

Vendor Access, also known as access.work (https://access.work), is a feature of Secure Remote Access that allows users to connect to devices through their browsers without needing access to the Admin By Request Portal.

Refer to Using Vendor Access for more information.