Search the ManageEngine site:  
 

Help Center

Quick Start

File Auditing

File Analysis

Data Risk Assessment

Endpoint DLP

Cloud Protection

General settings

Policy Configuration

Release notes

Troubleshooting

Guides

Third-party software Contact us

Login control

The Cloud Protection module offers login control as one of its control policies to manage logins to cloud applications and suites. To start off, policies can be used to block login names in two cloud suites: Microsoft 365 and Google Workspace.

You can apply a range of criteria to granularly control logins into these cloud suites. These criteria enable you to block:

  • Specific login names
  • All login names from specific domains
  • Usage of personal accounts in organizational suites
  • Login names that match a specific pattern

Creating a new login control policy

  • Select Cloud Protection from the modules drop-down menu at the top.
  • Go to Configuration > Control Policies > Login Control.
  • Click +Add Policy.
  • Enter a suitable Policy Name and Policy Description.
  • Assign a Tag. Tags can be used to group policies based on the category of the cloud suite.
  • Under Filter, enable the cloud suites or the applications that you want to block logins for by clicking the toggle button below them.
  • Click the Configure criteria buttons below the enabled cloud suites to define their login control criteria.
  • In the Configure login control criteria pop-up window that opens, add as many criteria as required by clicking the + button.
  • Click Done to close the window.
  • Click Save to create the login control policy.
Notes:
  • Login control policies will not work on sign-in methods that don't require usernames.
  • Logins can only be blocked if they occur through configured gateway servers.

Refer to the examples below for an understanding of how to use login control criteria effectively:

Example 1: Block the login name "user@gmail.com"

  • Enter user@gmail.com in the login name field.
  • Select Contains from the conditions drop-down.
  • Click Save.

Example 2: Block all Gmail login names

  • Enter gmail.com in the login name field.
  • Select Contains from the conditions drop-down.
  • Click Save.

Example 3: Only allow login names from the organization "abc.com"

  • Enter abc.com in the login name field.
  • Select Not Contains from the conditions drop-down.
  • Click Save.

Example 4: Block all login names that contain patterns, such as hr-1@abc.com, hr-2@abc.com, hr-3@abc.com, etc.

  • Enter hr-(.*)@abc.com in the login name field.
  • Select Regex from the conditions drop-down.
  • Click Save.

Don't see what you're looking for?

  • Visit our community

    Post your questions in the forum.

     

  • Request additional resources

    Send us your requirements.

     

© 2025 Zoho Corporation Pvt. Ltd. All rights reserved.