Teachme Biz has no feature to distinguish whether a computer or web browser is a company-issued device or a personal device.
If you want to prevent access from personal devices, restrict the networks (Current IP address) that can connect, and ensure that only company-approved devices can use those networks.
The two most common methods are as follows.
Method 1: Combine VPN with Group IP Restrictions
Set up a VPN only on company-issued devices, and use Group IP Restrictions to allow the current IP address of communications routed through the VPN.
Personal devices that cannot connect to the VPN will be unable to access from outside the company network.
This method works for computers, smartphones, web browsers, and mobile apps.
Key Configuration Points
- Configure your settings so that communications to Teachme Biz are routed through the VPN.
If only some communications are routed through the VPN, they may not appear to come from the VPN's current IP address. - If you also want to allow the current IP address of the internal company network, make sure personal devices cannot connect to the company's internal Wi-Fi or similar networks.
If a device is connected to an allowed network, personal devices will also be able to access it. - Group administrators and Sub-administrators are exempt from Group IP Restrictions.
To include them, you will need to apply for the "IP Restrictions Extended Feature."
Method 2: Combine Group IP Restrictions with Access Approval Management (Mobile App)
Use Group IP Restrictions to allow only the internal company network, and outside the company network, allow only company-approved mobile apps to be used.
Access Approval Management is a feature that approves access on a per-app basis using each app's Specific Code, and can be used not only with the Teachme Biz and Teachme Player apps, but also with Teachme MySkill and Teachme Communication apps.
By approving only the apps on company-issued devices, apps on personal devices will be unable to access from outside the company network.
Important Notes
- The web browser version and mobile browser are not subject to Access Approval Management.
If you want to allow browser access from outside the company, combine this with Method 1. - From the internal company network, access is possible even from unapproved apps or browsers.
Make sure personal devices cannot connect to the internal company network. - Even if someone attempts to log in from an app on a personal device, the request will appear in Access Approval Management as "Pending."
Please verify that the app is on a company-issued device before approving it. - If an app is reinstalled or the device is changed, the Specific Code will change, and approval will be required each time.
Related
Tell me about Access privileges by Current IP address (Group IP Restrictions and Folder IP Restrictions features)
https://help.teachme.jp/hc/en-us/articles/900005508766
How do I make the Group administrator also subject to IP address restrictions?
https://help.teachme.jp/hc/en-us/articles/900006442523
Tell me about Access Approval Management
https://help.teachme.jp/hc/en-us/articles/900005509126
[Glossary] What is an IP address?
https://help.teachme.jp/hc/en-us/articles/49197409803801
How to
Set up IP restriction for your group (Web Browser)
https://teachme.jp/8/manuals/9117232
Submit a request to enable access to the app via external networks（Mobile App）
https://teachme.jp/8/manuals/38342367
Approving Specific code linked from Mobile App (Web Browser)
https://teachme.jp/8/manuals/38223018