SmartSuite's enterprise security controls decide who can reach your workspace, from where, and how accounts and sessions are managed. Enterprise and Signature plans add IP restrictions, SAML or OpenID Connect single sign-on, SCIM provisioning, audit logs and data loss prevention (DLP); session management and sign-in with Google, Microsoft and Apple ID are on every plan.
Plan Availability | Enterprise and Signature: IP Restrictions, single sign-on (SSO), SCIM provisioning, audit logs and data loss prevention (DLP). Session management and sign-in with Google, Microsoft and Apple ID: all plans. |
Permissions | Administrators: Can configure workspace security settings, identity access, integrations, session controls, and user provisioning. |
Related Reading |
What Are Enterprise Security and DLP Controls?
Enterprise security controls help your organization decide:
Who can access SmartSuite
Where they can access it from
How user accounts are managed
How user activity is monitored
How email and identity policies are enforced
DLP stands for Data Loss Prevention. It refers to policies and tools that help prevent sensitive information from being shared, copied, emailed, or accessed in ways that violate company rules.
Enterprise Security Controls Overview
Control | What It Helps With | Example Use |
IP Restrictions | Limits workspace access to approved IP addresses or ranges | Allow access only from the office network or corporate VPN |
Microsoft 365 Integration | Routes SmartSuite email activity through Microsoft 365 | Apply existing Microsoft 365 DLP scanners and email policies |
Activity Logs / SIEM Integration | Tracks user activity and supports security monitoring | Send logs to a SIEM for audit and compliance review |
SSO with Conditional Access | Uses your identity provider to control login access | Block unmanaged devices through Microsoft Entra ID or Okta |
SCIM Provisioning | Automates user creation, updates, and removal | Remove access when an employee leaves the company |
Session Management | Lets admins view and end active sessions | Terminate sessions for a user or device that should no longer have access |
IP Restrictions
IP Restrictions let administrators control which networks can access SmartSuite.
This is sometimes called ring fencing because it creates a trusted boundary around your workspace.
When IP Restrictions are enabled, SmartSuite checks a user’s IP address during login. If the IP address is on the allowlist, access is granted. If it is not on the allowlist, access is denied.
Common Use Case
Your company wants SmartSuite to be available only from:
The office network
A corporate VPN
Other approved static IP addresses or IP ranges
This helps block access from personal home networks, public Wi-Fi, or unmanaged locations.
How to Set Up IP Restrictions
Follow these steps to configure IP Restrictions:
Log in with Administrator permissions.
Click your profile icon in the upper-right corner.
Select Workspace Administration.
Open the Security tab.
Go to the IP Restrictions section.
Add the approved IP addresses or IP ranges.
Include your current IP address before enabling the restriction.
Enable IP Restrictions.
Save or confirm your changes.
SmartSuite notes that IP Restrictions cannot be enabled unless your current IP address is included in the allowlist or covered by an allowed IP range.
Microsoft 365 Integration
SmartSuite supports a workspace-wide Microsoft 365 integration.
When email is sent through SmartSuite using Microsoft 365, that email can move through your Microsoft 365 environment. This allows your organization to apply existing Microsoft 365 controls, including DLP scanners, compliance policies, and email security rules.
This helps reduce duplicate configuration because your existing Microsoft 365 policies can continue to handle email inspection and enforcement.
Activity Logs and SIEM Integration
Administrators can use SmartSuite activity logs to monitor workspace activity.
A SIEM is a Security Information and Event Management system. It collects security events from different tools so your security team can review, search, and investigate activity in one place.
SmartSuite supports publishing event logs for SIEM analysis or activity tracking.
Activity Logs Can Help Track
Who accessed SmartSuite
What actions users performed
When activity occurred
Where sensitive data may exist
Whether unusual access patterns need investigation
SSO with Conditional Access
SSO stands for Single Sign-On. It lets users log in to SmartSuite using your organization’s identity provider instead of a separate SmartSuite password.
SmartSuite supports SSO using SAML and OpenID Connect (OIDC). These are common identity standards used by providers such as Microsoft Entra ID and Okta.
Why This Matters for DLP
If your company uses conditional access rules, those rules can apply before a user reaches SmartSuite.
For example, your identity provider can require:
A compliant company-managed device
Multi-factor authentication
Access only from approved countries or networks
Access only from trusted users or groups
This helps block unmanaged or unauthorized devices at the login stage.
SCIM Provisioning
SCIM stands for System for Cross-domain Identity Management.
SCIM helps automatically manage users between your identity provider and SmartSuite. SmartSuite supports SCIM for user provisioning and synchronization.
SCIM Can Help With
Creating new users
Updating user details
Removing users
Syncing user and group information
Reducing manual admin work
This is especially useful when employees leave the company. Once they are removed from your identity provider, their SmartSuite access can be automatically removed as well.
Session Management
Session Management lets administrators review and control active user sessions.
A session is an active login connection between a user and SmartSuite.
With session controls, admins can help respond to risk by ending active access when needed.
Common Reasons to End a Session
A user’s device is lost or stolen
A former employee still has an active session
A user logged in from an unexpected location
A security team needs to immediately revoke access
Practical Scenarios and Use Cases
Corporate VPN Access Only
Scenario: The compliance team wants employees to access SmartSuite only through the corporate VPN.
Solution: Enable IP Restrictions and allowlist only the company VPN IP range. Any login attempt from a home network, public Wi-Fi, or unauthorized IP address is blocked.
Microsoft 365 DLP Enforcement
Scenario: The IT team already uses Microsoft 365 DLP policies to scan outgoing email for sensitive information.
Solution: Use the Microsoft 365 integration so SmartSuite email activity flows through the organization’s Microsoft 365 environment, allowing existing DLP scanners and policies to apply.
Automated Employee Off-boarding
Scenario: An employee leaves the company and must lose access to business systems immediately.
Solution: Use SCIM provisioning with your identity provider. When the employee is removed from the identity provider, their SmartSuite access is automatically de-provisioned.
Important Notes
IP Restrictions are available on Enterprise and Signature plans.
SSO is available for Enterprise and Signature plan subscribers.
Always include your current IP address before enabling IP Restrictions to avoid blocking your own access.
SCIM helps keep user access aligned with your identity provider.
For the strongest DLP posture, use these controls together: IP Restrictions, SSO with conditional access, SCIM, Microsoft 365 policies, activity logs, and session management.
Frequently asked questions
Which plans include IP Restrictions, SSO and SCIM?
Enterprise and Signature.
Does SmartSuite have its own DLP scanner?
SmartSuite's DLP controls are listed on the Enterprise plan; for email, the Microsoft 365 integration lets your existing Microsoft 365 DLP policies inspect mail sent through SmartSuite.
Can an Administrator end a user's active session?
Yes. Session management lets Administrators view and end active sessions on every plan.
Last verified: 21 Oct 2026, against www.smartsuite.com/pricing (Enterprise security list) and the IP Restrictions, Configuring SSO, Configuring SCIM, SmartSuite for Microsoft 365 and Event Log Publication articles.