Approving new devices

A workspace can require that any new device be approved by a manager before it gets a session — a strong guard against a stolen password. With it on, a sign-in from an unfamiliar machine waits as "pending approval" until an owner or admin lets it in.

Approve or reject a device

• Open Manage → Device approvals. Each pending request names the device and the person, with when they asked.
• Choose Approve to trust the device — its owner can then finish signing in — or Reject, where you can add a reason.

Turn the requirement on

Under Manage → Workspace settings, in Device approval, enable "Require manager approval for new devices". You can also auto-approve devices with a verified email, and restrict logins to trusted IP ranges.