To restrict your clients' access so they can only log in to your specific Brightspace subdomain, while still allowing necessary access to other subdomains for components and APIs to function properly, you'll likely need to implement a combination of domain restrictions and network configuration rules. Here are some steps and considerations to tighten the safe listing/whitelisting in your organization's Brightspace environment:
Domain Restrictions:
Restrict Login Page Access:
Ensure that the login page for your Brightspace environment is only accessible from your organization's subdomain. This can usually be configured within Brightspace's administrative settings or by working with D2L support.
Implement a Custom Login Portal:
Create a custom login portal for your clients that authenticates users before redirecting them to your Brightspace subdomain. This portal can enforce additional security measures and ensure that only authorized users reach your Brightspace login page.
Network Configuration:
IP Whitelisting:
Configure your network firewall or Brightspace's IP restriction settings to only allow access to your Brightspace environment from specific IP ranges that your clients use.
VPN Access:
Require that clients connect through a VPN to access your Brightspace environment. This adds a layer of security and ensures that they are coming from a trusted network.
Brightspace Configuration:
Subdomain Configuration:
Work with D2L support to ensure that your Brightspace instance is configured to recognize and accept connections only from your specific subdomain.
API Access Restrictions:
If you're using APIs, ensure that they are set up to only communicate with your subdomain and the necessary service endpoints. This might involve configuring CORS (Cross-Origin Resource Sharing) policies or similar settings.
Client Education and Policies:
Educate Your Clients:
Make sure your clients are aware of the access policies and understand the importance of connecting only through the approved methods (e.g., using the correct subdomain, VPN).
Usage Policies:
Establish clear usage policies that prohibit accessing other organizations' Brightspace environments and explain the consequences of such actions.
Regular Audits and Monitoring:
Access Logs:
Regularly review access logs to monitor for any unauthorized attempts to access your Brightspace environment.
Security Audits:
Conduct regular security audits of your Brightspace configuration, network settings, and client access patterns to ensure that the restrictions are working as intended.
Remember, while configuring these settings, it's crucial to maintain a balance between security and usability to ensure that legitimate clients can access the necessary resources without undue hindrance. It's also advisable to work closely with D2L support and possibly a network security specialist to implement these measures effectively.
Connect with our Known and Fixed Issue information to learn about improvements made to Brightspace.
Connect with leaders in pedagogy, accessibility, learning experience design and more
The Accessibility category serves as a single point of access to three avenues in Brightspace Community leading to the Accessibility Academy, Accessibility Library and Accessibility Discussions. These avenues offer courses and articles about accessibility to enhance accessibility knowledge and a group of accessibility enthusiasts to stay connected with.
Have questions about how to use Community? Stay tuned with updates, feedback opportunities and more for the Community here!
Connect with and ask questions on how to best use the Brightspace Product to transform the way your users learn!
Connect with product experts to learn more about tools frequently used by Brightspace Developers such as APIs and integrations!
Want to learn more about Brightspace Partners and Integrations? This is the place to be!
Stay up to date with product updates and announcements in this category.
Connect with our release information to learn about monthly improvements and updates to Brightspace.
Learn more about all the upskilling opportunities with courses and resources offered via the Brightspace Learning Center, Brightspace Guided Training and other training opportunities!
