Restrict manual logon from certain workstations only
I have a requirement: If the user manually logs into the application using the logon screen, the user has to do it on certain workstations. Any suggestion to add this restriction into the application?
Updated: 11 Sep 2020 15:33 EDT
Pegasystems Inc.
US
Typically this requirement would be implemented via your network security team.
1) Block the URI of the username/password login screen from public access, but allow SSO servlet URIs
2) enable a private means of accessing the URL via a VPN or an authentication service that intercepts HTTPS requests before they reach the application server like SiteMinder, ZScaler Client Connector, etc.
Users will have to authenticate with the VPN or the authentication service before they can reach the standard servlet that allows a username and password for authentication.