As a company administrator, you can use IP allowlisting to control where your collaborators can gain access to your MURAL workspaces. Let’s say you only want devices on your company’s network to view your workspaces, rooms, and murals. With IP allowlisting, you can make that happen.
Note: IP allowlisting is only available to MURAL’s Enterprise customers and only restricts access to the MURAL application, not to MURAL’s APIs. |
An IP allowlist is a list of approved IP addresses from which collaborators can access MURAL. Once this is set up, members working outside of your allowlist won’t be able to sign in to your MURAL workspace. If you need to grant a remote member special access, we recommend setting them up with a VPN.
IP allowlisting also affects guests and visitors. By default, enabling an IP allowlist blocks anyone from accessing your workspaces if they are outside of your network. Similarly, implementing an IP allowlist by default prevents your members from accessing workspaces belonging to other companies. You can toggle either of these settings on or off from the IP allowlist page of your company dashboard.
Contents
Enable IP allowlisting
To enable IP allowlisting, work with your MURAL Account Representative. You’ll provide them with a range of approved IP addresses and they’ll set up the allowlist. If you’re unsure of that range, work with your IT department to identify the range of your company’s network. Once your Success Architect has configured your IP allowlist, you can view it from your company dashboard.
View your IP allowlist
After working with your Success Architect to set up your IP allowlist, you'll want to verify that everything looks correct. You can do this by accessing the IP allowlist page of your company dashboard.
To view your IP allowlist:
Click your name in the bottom left corner of the dashboard.
Select Company dashboard from the list of options.
Click IP allowlist in the left sidebar.
Here, you can view your IP allowlist under Addresses. If you notice any issues with this list, reach out to your Success Architect or support@mural.co.
Customize external collaboration settings
We know that blocking all IP addresses outside of your designated range inhibits collaboration and could be too extreme. To help, MURAL offers two options to customize external collaboration even with an IP allowlist enabled.
First, you can allow access from unlisted IP addresses for collaborators with non-company emails. If you invite someone outside your company to access a mural, chances are good they won’t be using an IP address on your allowlist. So, this setting lets you bypass the IP allowlist for those invited.
Second, you can allow your company members to join other companies’ MURAL workspaces. Implementing an allowlist prevents your employees from joining external MURAL workspaces. But sometimes your own employees will be invited to collaborate with other workspaces. Based on your needs, you can choose to allow this or not.
Note: All collaborators maintain access to MURAL-owned workspaces so they can take advantage of our training offerings. |
You’ll find these two settings on the IP allowlist page of the company dashboard once your allowlist is active.
To customize external collaboration settings:
Click your name in the bottom left corner of the dashboard.
Select Company dashboard from the list of options.
Click IP allowlist in the left sidebar.
Select/deselect Allow access from unlisted IP addresses. By default, this is not selected.
Note: This only grants access to non-company members, guests, or visitors using IP addresses not on your allowlist. Company members are still only able to gain access as long as their IP address is on your allowlist.
Select/deselect Allow my company members to join other companies’ MURAL workspaces. By default, this is not selected.
Click Save changes.
Now, you can rest assured that your MURAL workspaces are as secure as possible while also allowing the level of collaboration you and your teams need to succeed.
Keywords: Sometimes people search for "whitelist," but our term is "allowlist." |