Skip to main content
日本語 ไทย 简体中文 繁體中文

What is the best way to temporarily relax access control?

Question

Please provide information on how to temporarily relax access control.

Answer

For common methods and settings to relax access control, please refer to the following:
If you create a new access policy, you will need to assign the created policy to users using the procedure for Assign Access Policy Group to Users.

Also, please review the precautions for returning to access control conditions in【Notes on Reverting Access Control Conditions】.

Common Responses and Settings

1. Allow access without restrictions on location/device as Access-Free+

    • Overview:

      Create an access policy group that allows access from anywhere without specifying conditions such as IP addresses.
      This allows login without being restricted to devices or locations. However, please be aware that not applying access restrictions increases security risks.


    • Setting Method:

      ＜＜Administrator＞＞
      Create a new access policy group and assign the created policy to users who need access freedom.
      You can create an access-free policy by setting all items to [Disabled].

      ＜＜User＞＞
      No specific action required

2. Allow access from outside for browsers with an entrance ticket+

    • Overview:

      Set an entrance ticket cookie for browsers that have connected under entrance ticket issuance conditions, such as internal IP connections.
      This allows access from outside for browsers with this entrance ticket. Note that clearing browser cookies will also delete the entrance ticket, so please be careful.


3. Allow access from outside with OTP input+

    • Overview:

      Set up an access policy that requires OTP (One-Time Password) when accessed from unauthorized conditions, allowing login from external sources by entering OTP when logging in from outside the company. Note that entering OTP enables access from any environment, including personal PCs and rental PCs. Reference: What is OTP (One-Time Password)?


    • Configuration:

      <></>
      Modification of [Access Policy Group] settings is required. For detailed configuration, refer to Require OTP when accessing from outside the company other than the company PC.
      Additionally, for the OTP issuance method to users, refer to OTP Issuance Method and Expiration. If you choose to receive via email, you can configure the OTP notification address on the HENNGE Access Control management screen.

      1. Configure OTP Notification Email Address (per user)
      Users User List Edit screen of the relevant user (click the pencil icon) "OTP Notification Email Address"


      2. Allow users to change OTP notification email address (per application policy group)
      Users Access Policy Group Edit screen of the relevant policy (click the pencil icon) "Allow changing OTP Notification Email Address" condition
      [Enabled]: false --> Users cannot change the OTP notification email address by themselves.
      [Disabled] or [Enabled]: true --> Users can change the OTP notification email address by themselves.


      <></>
      If issuing OTP via the app or email (if set by the user), OTP configuration is required on the user console. For detailed configuration, refer to HENNGE Access Control User Console Guide (Part 1).

4. Allow Access from External Sources via HENNGE Secure Browser+

    • Overview:

      Install HENNGE Secure Browser on company PCs or personal PCs to allow access via HENNGE Secure Browser from external sources. If you already use HENNGE Secure Browser on mobile devices, you can handle it without changing access policies.


5. Allowing Access from Devices with Installed HENNGE Device Certificate+

    • Overview:

      Regardless of the access source, whether internal or external, you can allow access from devices with the HENNGE Device Certificate installed.
      For inquiries about the contract/purchase of HENNGE Device Certificate, please contact HENNGE One Account Management (cs-order@hennge.com).


Points to Note When Reverting Access Control Settings

If you want to revert to the previous settings, undo the settings changes made to relax access control.
Also, even if you revert the settings, there is a possibility that the authentication state when access control was relaxed will be retained,
so we recommend disconnecting the authentication with the following steps.

For users of Microsoft 365

Clear the authentication cache.

Reference: Disconnecting Azure AD Modern Authentication

For users of Google Workspace

Disconnect authentication by changing the password.

Reference: Disconnecting Google Workspace Authentication