Security Recommendations

These security recommendations depend on your community's specific configuration.

CAUTION:

Each community can be configured differently. Because of this, not all of these recommendations apply to all communities. If you have any questions about these recommendations, please contact your Jive Software representative.

Security Recommendation:	Applies to:	Description:
Configure user login security	Jive-x	Login security can include throttling, Captcha, and password strength requirements. For implementation details: See Configuring Login Security and Configuring User Registration.
Enable SSO	Jive-n	A single-sign on solution can help you provide a consistent login experience for your users while providing identity management for your organization via a third-party vendor. Jive Software strongly recommends using a single sign-on solution for access to internal communities. In addition to the out-of-the-box SSO options in the application, our Professional Services team can create customizations to meet almost any single sign-on requirement. For implementation details: See the Single Sign-On section, or, if you need an SSO customization, contact your Jive Software account representative.
IP Whitelisting	Jive-x and Jive-n	IP address whitelisting is available for restricting access to either the entire site, or just the administration console. You can also use whitelisting to restrict access to certain locations, such as corporate offices. To access this feature, contact Support.
Prevent spam in your community	Jive-x	Everyone hates spam, and it can also present security risks. Limit it in your community as much as you can. For implementation details: Preventing Spam includes several suggestions for dealing with spammers and preventing spam in your community, including a spam plugin that can connect to a third-party spam filtering tool. We also recommend reading the Spam Prevention Best Practices Guide in the Jive Customers group in Jive Community. (If you're a customer, we recommend joining this private group for useful community management content from Jive and fellow customers.)
Understand administrative permissions and how they work	Jive-x and Jive-n	Administrative permissions can be a powerful tool for limiting who can make changes to your community. For implementation details: See the Managing Administrative Permissions section.
Enable Anti-Virus Checking	Jive-x and Jive-n	Cloud communities automatically include a module that checks files for viruses before they can be uploaded to the community; for Hosted communities, this is an optional purchase.
If higher data security is needed, enable Encryption at Rest	Jive-x and Jive-n	Jive's Encryption at Rest module (an optional purchase) is our recommended solution for customers who need additional encryption to meet their security requirements. Complete infomation is available from Sales.