Portal Settings

Last updated on 07 November, 2023

You can use the Portal Settings of your LogicMonitor account to customize global behavior and functionality of your LogicMonitor portal for all users that log in. For example, you can require two-factor authentication for all LogicMonitor users that log in to the portal, configure a user session timeout, and add a company logo that is displayed on every portal for all LogicMonitor users.

Tenant Identifier Property Name

Alert aggregation is based on tenants. On the Alerts page, to display aggregation of alerts based on tenants, you must add the tenant.identifier property to your resources or resource groups to identify the property that belongs to a  tenant. However, if you are already using some other property to bifurcate the resources or resource groups (that is, a property other than the tenant.identifier property), then to avoid rework, on the Portal Information page, you can override the default tenant.identifier property with your property. If there is an alert for any resource that has your property set, then LogicMonitor gets the tenant value from your property specified in the Tenant Identifier Property Name field. 

To sync with the value you have set in the Tenant Identifier Property Name field, LogicMonitor uses the system.tenant.identifier property. It enables LogicMonitor to identify the tenant of a particular resource. The system.tenant.identifier property uses the value of the property set in the Tenant Identifier Property Name field. You can use your own custom property if you already have one (such as, customer.ID or auto.pod). Also, you can use the system.tenant.identifier property for other functionalities such as, the Applies To functionality. For more information, see Grouping Alerts by Tenant.

Two-Factor Authentication

Two-factor authentication (2FA) provides an extra layer of security for accessing your LogicMonitor account. In addition to a username and password, 2FA requires users to use a third party application or an authentication token delivered using SMS or voice to verify their identity.

You can globally apply 2FA for all users that log in to the portal for your LogicMonitor account. 2FA can also be applied on a per-user basis, however globally enabling 2FA forces all users to authenticate using 2FA regardless of the per-user setting.

Note: If you enable Single Sign On (SSO) for your LogicMonitor account, and SSO is not set to strict mode, users can choose to log in to their portals using SSO or 2FA. If SSO is set to strict access, users can only log in to LogicMonitor using SSO. To use 2FA with SSO, you must set this up with your SSO provider.

For more information about accessing your LogicMonitor account when 2FA is enabled, see Two-Factor Authentication Account Access.

Portal Clock Synchronization

LogicMonitor uses the Amazon Time Sync Service as the primary time source for all infrastructure that is hosted in AWS. All instances are configured to regularly synchronize their time with the AWS VPC Time Server.

All resources that are not hosted within AWS use time servers running and hosted on our Authentication and Authorization platform. These servers use the VPC time servers for their own synchronization to ensure that infrastructure resources stay in sync.

For redundancy and as a backup in case the VPC-based time server becomes unavailable temporarily, LogicMonitor also uses 3 geographically diverse time servers that are hosted with our Authentication and Authorization platform

Note: LogicMonitor customers can use the public-facing Amazon NTP servers to ensure that their devices are in sync with LogicMonitor’s infrastructure.

Requirements to Configure the Portal Settings

To configure the Portal settings, you need a LogicMonitor user with the “Manage” role for Account Information. For more information, see Users and Roles.

Configuring the Portal Settings

  1. In LogicMonitor, navigate to Settings > Account Information, and select the Portal Settings tab.
  2. To configure the time zone of your portal, select a time zone from the Time Zone setting.
    Time zones associated with a city name (for example, “America/Los_Angeles”) automatically update according to Daylight Saving Time schedules. Time zones with “UTC” do not automatically update.

Note: Time zones can be configured on a per-user bases. This allows users to view and configure time-based data and settings relative to their local region. For more information, see Users.

  1. In the Company Display Name field, enter a name.
    The company name displays throughout your LogicMonitor account interface.
  2. In the Alert Totals settings, enable the alert status you want to display as an alert count in the main navigation menu and on the Alerts page.
  3. To restrict IP addresses that can access your LogicMonitor account, select add ( + ) in the IP Whitelist settings, and do the following:
    1. In the IP, IP Range, IP Mask, or Hostname field, enter a public Internet facing IP address.

      You can identify addresses using any of the following formats:
      • Hostname (e.g. mycomputer.mybusiness.com)
      • IP address (e.g. 192.168.1.1)
      • Network/mask (e.g. 192.168.1.0/24)
      • Network range (e.g. 192.168.1.100-255)
    2. Select Save.
      LogicMonitor displays a warning if your current IP address will be locked out after saving the list. If you are locked out of your account, contact Customer Success.
  4. To enable a remote session on an account-wide basis, select Enable Remote Session.
    For more information, see Remote Session.
  5. To enable two-factor authentication on an account-wide basis, select Require Two-Factor Authentication for all Roles and Users.
    A message displays prompting you to select when to enforce authentication. You can enforce authentication immediately or eventually.
  6. To suspend a user’s account after a defined number of days, enter a value in the Suspend user after days of inactivity on LM portal setting.
    Accepted values are whole numbers.
  7. To log users out of the LogicMonitor portal after a specified length of time, select a timeout value for users from the User Session Timeout option.
    Inactivity for the specified length of time results in a user account being logged out. The timeout period is applied to users that do not enable the option to stay signed in when they log in to their LogicMonitor portal.
    The default timeout period is four hours.

Note: If your LogicMonitor account has single sign-on enabled, session timeouts are also governed by your SSO identity provider. If you have an account that must remain logged in longer than the timeout value, there are two options available:

  • Enable the option to stay signed when logging in to the LogicMonitor portal.
  • Restrict single sign-on to force a user session to re-authenticate and renew with the SSO provider. If the SSO session timeout is configured for a longer timeout session than the LogicMonitor portal, the user session re-authenticates and renews with the SSO provider when the LogicMonitor portal session times out.

LogicMonitor cannot guarantee the session timeout behavior with every environment that leverages single sign on. For more information, see Single Sign On.

  1. In the Company Logo settings, upload a logo for the Heading Logo and Login Logo by dropping or browsing for a file.

The Portal Settings are immediately applied at the global level for all users that log in to the portal. 

In This Article