As an additional security measure, you may choose to restrict Slate access for administrative users to only those who are on your campus network (i.e., restricts Slate access by IP address).

Once enabled, users will only be able to log into Slate if they are either physically on your campus or are using a campus VPN to route their traffic through the campus network.

🔔 Important!

This affects all Slate logins via your SSO and may prevent logins from prospective students or alumni. If you use SSO to authenticate applicants, persons, or datasets, they also need to be on your campus network.

1. Go to Database → Configuration Keys.

2. Under Security & SSO Settings, select Require VPN: Allowed Subnets.

3. Enter your allowed IP address or subnets (in CIDR notation) separated by commas.

4. Select Save.

Wait for 15 to 20 minutes for your changes to propagate to all web servers.