As an admin or account owner, you can add or change the security settings of Creative Force.
Where to find the settings
To do this, go to the main menu within Gamma in the top right corner, click on "Studio Settings," and then select "Security Settings" from the sub-menu on the left.
Once here, you will need to enter your password to view or make any changes.
Note: Once you have entered a valid password Creative Force will assign you a session for 15 minutes to finish the content for the settings.
How to enable 2FA to all Creative Force apps
The first setting you can configure is Two-Factor Authentication (2FA). Once 2FA is enabled for the account, you can choose to enforce it for all users or make it optional.
We currently support the following Authentication Apps:
Google Authenticator
MS Authenticator
Authy
LastPass Authenticator
Read more about how to roll out 2FA in your studio here.
How to set up password rules
The second setting you can configure is the rules for user passwords. You can control the length, digits, symbols, and other rules.
When you are done with the settings, click "Save changes." You then have the option to force users to update their password to meet the new criteria.
How to set up IP Allow Lists
The third setting you can configure is your IP allow list. To enable IP allow lists, ensure your IP is on the list; otherwise, you will be denied access to Creative Force. Click "Add," enter the details in the popup, and save by clicking "Add".
If a user is using an IP on the allow list and the admin removes it, the user cannot access Creative Force after 90 seconds.
If a user cannot access Creative Force because the IP is not on the allowed list, and an admin adds it, the user can access Creative Force after 15 seconds.
Encorcing SSO
This option is only available if you have the SSO settings turned on in your account.
If your users are logging in via SSO and you want to ensure that no other login option is used, consider "enforcing" the SSO login. This means users can no longer access Creative Force by entering their password and must instead go through the IDP.
