Where to find the settings
As an admin or account owner, you can add security settings in Creative Force. To do that you must browse to the main menu in the top right corner and click on "Studio Settings" and click on "Security settings" in the sub-menu to the left.
To access the security settings you will have to enter your account password.
Note: Once you have entered a valid password Creative Force will assign you a session for 15 minutes to finish the content for the settings.
How to enable 2FA to all Creative Force apps
The first thing you can set up is Two Factor Authentication (2FA).
Once 2FA is enabled on the account, you can then choose to enforce it for all users or make it optional.
We are currently supporting follow Authentication Apps:
- Google Authenticator
- MS Authenticator
- LastPass Authenticator
Read more about how to roll out 2FA in your studio here.
How to set up password rules
The second thing you can set up is the rules for the user password. As you can see below, you can control the length, digits, symbols and other rules.
When you are done with the settings you hit "Save changes". You then have the option to force users to update their password to meet the new criteria.
If you chose to "Force Password Updates":
- the next time a user tries to log in to any of the Creative Force applications, they will immediately be required to change their password.
- users that are already logged in can continue working in the current session for up to 24 hours, after which they will be forced to change their password.
Note: If you don't click "Force Password Updates" the updates will only apply to new users, or if you as a user want to update your password.
How to set up IP whitelist
The Third thing you can set up is your IP whitelist. If you want to enabled IP whitelist you need to make sure your IP is on the list or else you will be denied access to Creative Force.
Just click "Add" and enter the details in the popup and save by clicking "Add".
- If a user is using an IP on the whitelist and the admin removes it from the list, then the user cannot access Creative Force after 90 seconds.
- If a user cannot access Creative Force because the IP is not on the whitelist, and an admin adds it to the list, then the user can access Creative Force after 15 seconds.