Skip to main content

Security Settings

Security settings control who can get into your practice's workspace and from where. You can limit which email addresses people can be invited with, and you can make SOPHIE open only from your office network, with exceptions for people who work remotely.

These settings apply to every space in the practice. Only the practice owner and people with permission to Edit workspace settings can change them.

Where to find them​

  • Settings › Security & sharing (under Workspace) holds Allowed email domains and the practice's headline coaching for Power Meets.
  • The Security tab of your Profile settings (your picture or initials › Profile › Security) holds Allowed Email Domains too, plus IP Address Restriction, which is where you restrict sign-in to your office network.

Allow only certain email domains​

If everyone at your practice has an email address at your own domain (for example, yourpractice.com), you can stop invitations going to any other address.

  1. Open Settings › Security & sharing, or the Security tab of your Profile settings.
  2. Under Allowed email domains, add your domain, such as yourpractice.com. On the Security tab, type it and click Add. Add more than one if you need to.

Once a domain is listed:

  • People can only be invited with an address at one of the listed domains.
  • People can only change their own sign-in email to an address at one of the listed domains.
  • People already in the workspace with a different address aren't affected.

Leave the list empty to allow any email address. With no domains set, the Security tab says "No domain restrictions configured. All email domains are allowed."

Restrict sign-in to office networks​

IP restriction makes your workspace open only from internet connections you approve, typically your office network. Anyone trying to use it from somewhere else sees a Restricted Location page instead.

Add your own access first

The restriction applies to everyone, including the owner, unless they're on an approved network or on the Excluded Users list. Add your office network, and exclude anyone who needs to work from elsewhere (yourself included), before you turn it on.

  1. Open your Profile settings (your picture or initials › Profile) and choose the Security tab.
  2. Under IP Address Restriction, look at Your current IP. If you're in the office now, click Add beside it to put it on the allowed list.
  3. Under Allowed IP Addresses, add any other addresses. You can add a single address (such as 203.0.113.42) or a range for your office network (such as 203.0.113.0/24). Your internet provider or IT support can tell you which to use.
  4. Under Excluded Users, choose anyone who should be able to use SOPHIE from anywhere, such as remote staff or people who travel.
  5. Turn the restriction on with the switch. Add at least one allowed address first.

You can remove an address or an excluded person at any time with the remove button beside them.

Access requests​

When someone is blocked, the Restricted Location page shows their IP address and offers Request Access. Their requests appear under Pending Access Requests on the Security tab, with their location when SOPHIE can work it out.

  • Click the approve button ("Approve — adds IP to allow list") to let them in from that address.
  • Click the dismiss button ("Dismiss request") to turn the request down.

People who are blocked can also connect to the office network or an approved VPN and click Changed networks? Try again, or ask to be added to the excluded users.

In the workspace menu, a practice whose IP restriction is blocking you is marked Restricted.

Coach how headlines are written​

Power Meets start with headlines: short notes that name a metric and what moved it. Under Meetings on Settings › Security & sharing, How we write headlines is your practice's guidance for writing them. It's shown beside every headline box, both in meeting prep and in the meeting itself.

Changing it needs the Coach meeting headlines permission. See Preparing for a Power Meet.

Good to know​

  • Domains and IP restriction work separately. Domains control who can be invited. IP restriction controls where people can use SOPHIE from. You can use either or both.
  • The SOPHIE support team can still reach an IP-restricted workspace when you ask them for help.
  • Public links to Standards are managed on the Sharing & access tab. See Public link sharing.