Security Settings

Manage security options for your organization.

Accessing Security Settings

1

Go to Settings and select Security.

Note: Requires Admin or Owner role.

Authentication

Single Sign-On (SSO)

If enabled, users can log in with your organization's identity provider:

• Login with company credentials

• Centralized access management

• Enhanced security

Password Policies

Configure password requirements:

• Minimum length

• Complexity requirements

• Password history

• Expiration period

Session Management

Session Timeout

Set how long users stay logged in:

• Idle timeout duration

• Maximum session length

Active Sessions

1

Go to Security.

2

View active sessions across users.

3

Terminate sessions if needed.

Force Logout

Administrators can:

• End specific user sessions

• Force all users to re-authenticate

Access Control

IP Restrictions

1

Go to Security.

2

Enable IP restrictions.

3

Add allowed IP ranges.

4

Save.

Users outside allowed IPs cannot access Kaana.

Audit Logging

Track security-relevant events:

• Login attempts

• Permission changes

• Data access

• Configuration changes

View audit logs to monitor activity.

Data Protection

Data Export

Control who can export data:

• Restrict export permissions

• Audit export activities

Data Retention

Configure data retention:

• How long deleted items are kept

• Archive policies

Two-Factor Authentication (2FA)

Require 2FA

1

Go to Security.

2

Enable Require 2FA.

3

Set grace period for setup.

4

Save.

2FA Methods

Supported methods:

• Authenticator apps (recommended)

• SMS codes

• Backup codes

Security Best Practices

Regular Audits

• Review user access quarterly

• Check audit logs for anomalies

• Remove unnecessary permissions

Password Security

• Enforce strong passwords

• Require regular changes

• Educate users on security

Access Management

• Use least-privilege principle

• Promptly deactivate departing users

• Review integrations regularly

Monitoring

• Check audit logs regularly

• Set up alerts for suspicious activity

• Review failed login attempts

Compliance

Data Handling

Kaana supports compliance needs:

• Data stored securely

• Encryption in transit and at rest

• Regular security updates

Reporting

For compliance audits:

• Export audit logs

• Access activity reports

• Review permission configurations

Incident Response

1

Document what you observed.

2

Check audit logs.

3

Revoke suspicious access.

4

Contact Kaana support.

5

Notify affected users if needed.

Getting Help

For security concerns:

• Contact your administrator

• Reach out to Kaana support

• Report vulnerabilities responsibly