Hosted ODP Manager and Institution IP Address Validation

/in , , , /by

Strunk recommends as a best practice that institutions provide a list of IP addresses or ranges that are permitted to access the Strunk software. This ensures that users not only have a valid username and password, but also are logging into the software from an allowed IP address. Strunk can configure this feature once an institution’s allowed public IP addresses are provided.

When this option is configured, a user’s IP address is checked at login against the list of allowed IP addresses. If the IP address is not on the list, an error is displayed that shows the current IP address of the user. If the user later logs in from an allowed IP or if the IP address is added to the Allowed IP address list, the user will be able to log in successfully.

As an alternative to providing a list of allowed IP addresses, the hosted ODP Manager software can require a user to provide a PIN. If the IP address is new for the user or if the IP address has not been verified by the user in the last thirty days, a PIN number will be required. The user will request a PIN be sent to the email on record. Once the PIN is entered, the user will be able to login. Strunk can configure this feature upon request.

If you have any questions about these options in hosted ODP Manager, please contact Strunk Support at support@strunkaccess.com to find out more.

An independent certified public accountant has examined Strunk’s operations and found them to be in compliance with the AICPA’s Trust Service Principles. It was determined that Strunk meets the Security, Availability, Processing Integrity, Confidentiality, and Privacy criteria for SOC 2 established by the AICPA.