Admin Security Settings

The Security tab of the Hudu Admin area allows for the configuration of added security measures to protect your environment.

In this article, we will discuss the options and abilities that the Security tab in the Hudu Admin area provides. These include:

• Authentication
  • 2FA
  • SAML/SSO
• IP Access Control
  • Turning on IP Access Control only allows specified IP addresses to access Hudu, including the web app, browser extensions, the mobile app, and MCP.
  • IP Access Control rules don't apply to publicly shared pages. As of version 2.47, IP access for the API is set per key in Admin → API Keys.
  • Choose to disable IP Access Control for portal users.
• Content Security
  • Govern which external content types can be loaded or embedded within your instance.
  • Admins can adjust allowed sources for different categories.
• Password Generator Defaults
  • Choose generator options (i.e. All characters, Easier to say, Easier to read, Easier to remember).
  • Set the character length.
  • Set the number of words.
  • Choose character for Word separator.
  • Select to Alternate case between words.
  • Select to Include a number.
• Defaults
  • Idle User Timeout.
  • Disable External Sharing.
  • Show OTP secrets when editing passwords.

Guides

You've got your basic company details set up, now it's time to add some extra layers of security. By navigating to the Hudu Admin Security tab, you'll be able to configure the following:

• 2FA
  • By clicking configure on the 2FA option, you can set up app-based 2FA.
  • App-based 2FA must first be set up by a super-admin before it can be enabled for all users. If you enforce app-based 2FA, portal users may also be asked to set it up.
  • To learn more about app-based 2FA setup, our supported providers, and enforcing 2FA on all users, visit our MFA: App-based 2FA article.
    • Additionally, you can set up Duo 2FA. When Duo 2FA is enabled, all non-portal users will see the Duo prompt instead of the normal 2FA. Portal users are exempt from Duo.
    • Visit our article on Setting Up Duo Authentication for more information.
• SAML/SSO
  • Click configure next to SAML/SSO to enable Single Sign-On using a provider of your choice.
  • Portal users are always exempt from enforced SSO and can sign in with their username and password.
  • Admins will be given a password option if SSO fails, in order to prevent lock outs.
  • Admins can always log in via password by adding /?sso_disabled=true to the end of the instance URL.
  • Visit Understanding SAML/SSO for more information. Links to the support guides for different providers are also available here.
• IP Access Control
  • Enable IP Access Control to control which IP addresses can access Hudu.
    • These rules don't apply to publicly shared pages. As of version 2.47, IP access for the API is set per key in Admin → API Keys.
  • Disable IP Access Control for Portal Users
    • If this isn't checked and IP restrictions are in place, portal users can't sign in until their IP address is added.
  • See our article on IP Access Control to learn more.
• Content Security Policy
  • Enabled by default.
  • Admins can customize additional sources for each of the following content types:
    • Frame sources
    • Media sources
    • Style sources
    • Script sources
  • See our article on Managing Content Security Policy for more information.
• Idle User Timeout
  • Choose the timeout default for all users across your environment from fifteen minutes up to one week.
• Disable External Sharing
  • Check the Disable External Sharing Features box to turn off all external sharing options, including share links and other client/end-user sharing options in the Hudu interface.
• Default Password Length
  • Set the default password length for passwords generated within Hudu.
  • Select the Update Defaults button to save these settings.
• Show OTP Secrets When Editing Passwords
  • Choose whether or not you want OTP secrets exposed when a password is being edited.