I would like to validate the possibility of implementing the following security controls for the AppSheet application used by the company:
Automatic logout at a specific time
We need users to be automatically logged out of the application at a predefined time, for example, 6:00 PM, preventing active sessions from remaining after business hours.
Access restriction by IP address
We need to restrict application access so that it can only be used from the company’s authorized public IP addresses.
Access only through the store/company network
The objective is to allow users to access the application only when connected to the company’s network, preventing access from other networks, such as home networks or mobile connections.
I would like to confirm which of these controls can be implemented directly within AppSheet and which require additional configuration in Google Workspace or the company’s network infrastructure.
We also need to know what information and configuration will be required to implement these controls, such as the store’s public IP address, network configuration, and the Google Workspace edition currently used by the company.
Thank you for the information. I understand that these controls cannot be implemented directly in AppSheet.
In that case, I would like to know whether these requirements can be implemented using Google Workspace, considering that the users access AppSheet with corporate Google accounts:
Automatically terminate/revoke users’ sessions at a specific time;
Restrict access based on IP address;
Allow access only when the user is connected to the company/store network;
Prevent the user from simply logging in again after the designated cutoff time.
The idea would be to use Google Workspace as the authentication and security layer, while keeping AppSheet as the application.
Has anyone implemented this type of control for AppSheet users through Google Workspace? Which Google Workspace features or edition would be required?
Google Gemini responded that “Google Workspace native settings do not support time-of-day or schedule-based login restrictions.” However it suggested other alternatives such as Microsoft Entra ID / Azure AD, Okta, Ping Identity, or miniOrange.
Please evaluate AppSheet’s integration with Okta.
Okta seems to be a powerful tool. As per Google Gemini AI, it can implement the measures you wish to implement. However as usual, please thoroughly evaluate at your end.
There are some other tools suggested by Google Gemini AI as mentioned above. But since Okta already has an AppSheet supported integration, you may want to begin with Okta.