Authentication procedures

The following procedures are used with the setup, installation, or use with authentication.

Setting IP address range

You define an IP address or addresses as valid locations from which users can log in from in a combination of two settings.

The second setting specifies a valid IP address or addresses for each user. This can be an individual address, a range of addresses, or combination of either. The specified range is called the Trusted IPs. Users outside of this range or ranges won't be able to login except by using Password authentication with the Two Factor Mode set to Outside Trusted IPs.

Note: The Trusted IP range setting cannot be used to prevent users from logging in if they access Relativity from the same server where it is installed. To secure Relativity login from the server where it is installed, you must disable non-admin user remote access to the server.

To set the user Trusted IP range:

  1. Select the Users tab.
  2. Click the user's name.
  3. Click Edit.
  4. Enter the IP range in the Trusted IPs field. If you have multiple trusted IPs, enter each IP range on a new line.
    Trusted IPs field

    Note: Relativity only supports the IPV4 format for Trusted IP addresses. It doesn't support the IPV6 format.

  5. Click Save.

By default, no value is empty, which indicates any IP address is valid.

In case of setting the user's Trusted IP range, you can specify an individual address, a range of addresses, or a combination of either, separate each one with a carriage return.

Addresses use the "###.###.###.###" format. The following wildcards are available for both settings:

    Description Example

    Asterisk (*)

    (Asterisk wildcard)

    Matches zero or more characters.

    192.168.31.*. You can't use this notation with the match range of digits wildcard.

    Hash (#)

    (Hash wildcard)

    Matches any single digit 0-9. 192.168.31.##. You can't use this notation with the match range of digits wildcard.

    [start-end]

    (Match range of digits wildcard)

    Matches a range of digits.

    192.168.31. [0-255]. You can't use this notation with the asterisk and/or hash wildcards.

    16-bit mask A 16-bit number that masks an IP address. 192.168.0.0/16 is the same as 192.168.0.0/255.255.0.0.
    Network address range is 192.168.0.0-192.168.255.255.
    24-bit mask A 24-bit number that masks an IP address. 192.168.31.0/24 is the same as 192.168.31.0/255.255.255.0.
    Network address range is 192.168.31.0 - 192.168.31.255.
    25-bit mask A 25-bit number that masks an IP address. 192.168.31.0/25 is the same as 192.168.31.0/255.255.255.128.
    Network address range is 192.168.31.0 - 192.168.31.127.