Security Hardening

The following best practices help you strengthen the security posture of your SDA platform tenant.

Enable MFA Enforcement

Enable MFA Enforcement in Manage Company to require all users to set up Multi-Factor Authentication before accessing the platform. This ensures that compromised passwords alone cannot grant access to your tenant.

Enable MFA for IDEaaS

For environments where IDEaaS provides access to sensitive OT infrastructure, enable MFA for IDEaaS in Manage Company. This requires users to verify their identity via a one-time code (email or authenticator app) before every IDEaaS session, adding a dedicated security layer for Browser Based Engineering access — even if platform-wide MFA is already enforced.

Configure User Role Expiration

Set a Maximum User Role Expiration to ensure that user permissions are regularly reviewed and renewed. This limits the window of exposure from stale or forgotten role assignments, particularly for external collaborators or temporary team members.