Configure OneLogin for IP-Based Enforcement

1. Configure the Prisma Browser Application Enforcement IP Addresses

   1. In the OneLogin toolbar go to Security -> Policy .
   2. Click New App Policy.

   3. Enter a name to identify the policy. For example, Enforce Access from the Prisma Browser only.
   4. In the IP Address Whitelist, copy and paste the egress IP Addresses.
   5. Click Save.
2. Click Select Applications and User Groups to Adhere to Policy

   1. On the OneLogin toolbar go to Application → Applications.
   2. Click Add App.

   3. In the Found Applications field. search for the application that you need to add.
   4. Click Save.
   5. Select Access.
   6. In the drop down before the Policy Title, select Enforce Access from the Prisma Browser only.
   7. Repeat steps b-f for each application that you want to add enforcement access.

      The Prisma Browser can't be a required application for enforcement.
   8. Select Users.
   9. Select the Users or Groups that must adhere to the Enforce Access from the Prisma Browser only policy.

3. Return to IP-Based Enforcement and complete step 3 to select OneLogin and turn on enforcement.