Organization owners and admins open Settings → Organization → Security to manage session policies and view outbound IP addresses. On Sim Cloud, this page requires an Enterprise organization.
Session policies
Set session lifetime and idle limits, or use Sign out all members to revoke member sessions except your current session. This action does not revoke API keys.
See Session policies for setup, defaults, limits, and enforcement.
Outbound IP addresses
Copy your organization's configured addresses in /32 format and allowlist every listed address on the destination firewall. Contact Sim support or your deployment administrator to configure dedicated IPs and confirm coverage for the connections you use.
Connection coverage
Dedicated routing supports public IPv4 destinations over HTTPS on port 443. Its coverage depends on the connection:
| Connection | Routing behavior |
|---|---|
| Supported Search connector API requests, HTTP request blocks, MCP and A2A connections, and HTTP requests through Sim's local Function runtime | Use the organization's dedicated routing assignment; background jobs use the same assignment |
| Native database connections, AWS SDK integrations, remote sandbox traffic, and browser requests | Keep their existing network paths |
| Google Drive, Fireflies, Google Workspace user and group discovery, and Atlassian OAuth site discovery | Currently keep their existing network paths |
| Other provider SDKs and OAuth authorization or token refresh calls | Require separate coverage confirmation |
Dedicated IPs do not change permissions in connected services. If dedicated routing is unavailable, affected requests fail instead of using shared IPs. Organizations without dedicated routing keep their existing behavior.
Self-hosted availability
The outbound IP section is available to organization administrators on self-hosted deployments. Session controls appear when session policies are enabled. See Self-hosted enterprise.