As an admin or account owner, you can add or change the security settings of Creative Force.
Where to find the settings
In order to do this, you can go to the main menu within Gamma in the top right corner click on "Studio Settings", then click on "Security settings" in the sub-menu to the left.
Once here, you will need to enter your password in order to view or make any changes.
Note: Once you have entered a valid password Creative Force will assign you a session for 15 minutes to finish the content for the settings.
How to enable 2FA to all Creative Force apps
The first thing you can set up is Two Factor Authentication (2FA).
Once 2FA is enabled on the account, you can then choose to enforce it for all users or make it optional.
We are currently supporting follow Authentication Apps:
Google Authenticator
MS Authenticator
Authy
LastPass Authenticator
Read more about how to roll out 2FA in your studio here.
How to set up password rules
The second thing you can set up is the rules for the user password. As you can see below, you can control the length, digits, symbols and other rules.
When you are done with the settings you hit "Save changes". You then have the option to force users to update their password to meet the new criteria.
How to set up IP Allow Lists
The third thing you can set up is your IP allow list. If you want to enable IP allow lists you need to make sure your IP is on the list or else you will be denied access to Creative Force.
Just click "Add" and enter the details in the popup and save by clicking "Add".
If a user is using an IP on the allow list and the admin removes it from the list, then the user cannot access Creative Force after 90 seconds.
If a user cannot access Creative Force because the IP is not on the allowed list, and an admin adds it to the list, then the user can access Creative Force after 15 seconds.
Encorcing SSO
This option is only available if you have the SSO settings turned on in your account.
If your users are logging in via SSO and you want to ensure that no other login option is used, you should consider "enforcing" the SSO login. This means that users can no longer access CF by entering their password and must instead go through the IDP.
