Restricting Users from Accessing the SAS® Customer Intelligence 360 Based on IP Addresses

[SomSASTS]

Customers often ask whether we can restrict users from accessing the SAS Customer Intelligence 360 application outside of the company firewall. They are also curious about whether we can restrict the access of user who is no longer working with our organization.

To restrict access, configure the Tenant Access settings to limit the IP addresses from which users can access the application. This setting restricts use of the SAS Customer Intelligence 360 user interface and making API calls based on the configuration.

See Tenant Access for more information.

Important reminder: Be sure to include your external IP address in the range of allowed IP addresses for the user interface to ensure that you do not lose access to the user interface.

Also note the following points:

1. For Federated Single Sign-On (SSO) implementation: Users will no longer be able to access SAS Customer Intelligence 360 if they are removed from the company’s authentication provider (AD or LDAP), even when they are still listed in SAS Customer Intelligence 360 as users. In this case, the user can no longer authenticate and thus will not have access.
2. The SCIM API provides an ability to programmatically remove users as part of an employee's offboarding process.

For additional help, contact SAS Technical Support by creating a track with the Contact Support option in the SAS Customer Intelligence 360 user interface.

[LeonoraG]

Are there any known impacts on objects created by or workflows involving the user removed using the SCIM API?
Thanks?

[OlafKratzsch]

There are no restrictions on any objects. When you have defined IP access lists for the API gateway that also impacts the SCIM API. In that case it can only be called from machines with IP addresses in the defined range.