Overview: Advanced Security

As an Account Owner or Admin, you can use Advanced Security settings to have more granular control and visibility over your users and account activities. From managing user sessions to tracking changes made within the account, these settings will make it easier for you to maintain compliance with internal security processes.  

HOW TO:

• Access Advanced Security
• Enable Two-Factor Authentication for all users
• Enable SSO for all users
• Use Activity Log
• Use Active User Sessions
• Use Login Records
• Additional Information

How to access Advanced Security

Open your Databox Analytics Account and navigate to Account > Account Management to open your Account Management Application. 

Navigate to the Administration section and click on Advanced Security.

How to enable two-factor authentication (2FA) for all users

Admins can enforce the Two-factor authentication (2FA) for all users in their Account. Requiring two-factor authentication, will significantly reduce the risk of unauthorized access, even if your password is compromised.

Two-factor authentication (2FA), is a security measure that adds an extra layer of protection to your accounts. Instead of relying solely on a password, 2FA requires users to provide a second piece of information, typically a temporary code sent to their mobile device or generated by an authentication app.

Learn more about two-factor authentication here. 

1. In your Account Management Application, navigate to Advanced Security > Two-factor authentication
2. Click the Require two-factor authentication for all users toggle. This will open a pop-up window for confirmation.
3. Click on the red Yes button in the pop-up window
4. Click on the green Save Change button. 

How to enable SSO login for all users

Single sign-on (SSO) is an authentication method that enables users to securely authenticate with multiple applications and websites by using just one set of credentials, rather than having to set up multiple usernames and passwords across platforms. The credentials are stored centrally in a cloud directory.

Admins can now ensure a more secure log-on experience by allowing access only to users who log in via Single Sign-On (SSO). When this is enabled, username and password login will be restricted and only SSO login will be permitted for all users in your account.

Learn how to enable SSO for all users here. 

How to use the Activity Log

You can use the Activity Log to get a detailed timeline of the actions taken in your account. The Activity Log feature is available both in the Account Management Application (AMA) and Databox Analytics. 

• Activity Log in Account Management Application (AMA): Monitor who’s adding or removing users, updating company information, and other account settings. 
• Activity Log in Databox Analytics: Monitor who’s adding dashboards, creating metrics and goals, deleting reports, and more. 

IN THIS SECTION

• How to use the Activity Log in the Account Management Application (AMA)
• How to use the Activity Log in Databox Analytics

How to use the Activity Log in the Account Management Application (AMA)

In your Account Management Application, navigate to Advanced Security > Activity Log

• A) Search field: Type in any activity that you want to view details for. 
• B) Time Frame: Filter the activities in your account by Time Frame. Select the time frame from the drop-down list, you can select "Today," "Last 7 days", "Last 30 days", "Last 90 days" or "All Time" as the Time Frame
• C) User: Filter the activities by the users in your account. Select the user from the drop-down list that you want to view the activities for. 
• D) Feature: Filter the activities in your account by features. Select the feature from the drop-down list, you can select "All", "Data Source", "Company Information", "Account", or "User".  

How to use the Activity Log in Databox Analytics

In your Databox Analytics Account, navigate to Account > Activity Log

• A) Search field: Type in any activity that you want to view details for. 
• B) Time Frame: Filter the activities in your account by Time Frame. Select the time frame from the drop-down list, you can select "Today," "Last 7 days", "Last 30 days", "Last 90 days" or "All Time" as the Time Frame
• C) User: Filter the activities by the users in your account. Select the user from the drop-down list that you want to view the activities for. 
• D) Feature: Filter the activities in your account by features. Select the feature from the drop-down list, you can select "Databoards", "Databoard Loops", "Metrics", "Reports", "Data Sources", "Goals", "Scorecards", "Alerts", or "Scheduled Snapshots".  

How to use Active User Sessions

You can use the Active User sessions feature to monitor who’s accessing your account and where they’re doing it from. By using Active User Sessions, you can quickly identify unusual activity or potential security threats as they happen and take immediate action (if needed) by terminating sessions for other users individually or all at once. 

In your Account Management Application, navigate to Advanced Security > Active User Sessions

• A) Search field: Type in the user's name to view their active sessions.
• B) User: Filter the sessions by the users in your account. Select the user from the drop-down list to see when they have accessed your account. 
• C) Product: Filter the sessions by the Products (Databox Analytics or Databox Benchmark Groups) and the Account Management Application. 
• D) Terminate all: Select this to terminate the sessions of all the users in your account. \
• E) Terminate: Select this to terminate the session of a specific user. 

How to use Login Records

You can use the Login Records feature to keep track of who’s logging into your account. Review recent login attempts, including successful and failed ones, to quickly identify any unauthorized access. Get detailed information about the user, their location, and the time of each login. 

In your Account Management Application, navigate to Advanced Security > Login records

• A) Search field: Type in the user's name to view their login records. 
• B) Status: Filter the login records by the status of login, you can select "Successful" or "Only failed attempts" from the drop-down list. 
• C) User: Filter the login records by the users in your account. Select the user from the drop-down list to see when they logged in. 
• C) Product: Filter the sessions by the Products (Databox Analytics or Databox Benchmark Groups) and the Account Management Application. 

Additional Information

• If you are a trial user of the Premium plan, be cautious when enabling SSO login for all users, as this will delete all the passwords of the users in your account that are not logging in via SSO. You will need to reset the passwords of the users in your account after your trial period ends.