# Security (/platform/enterprise/security)



Organization owners and admins open **Settings → Organization → Security** to manage session policies and view outbound IP addresses. On Sim Cloud, this page requires an Enterprise organization.

## Session policies [#session-policies]

Set session lifetime and idle limits, or use **Sign out all members** to revoke member sessions except your current session. This action does not revoke API keys.

See [Session policies](/platform/enterprise/session-policies) for setup, defaults, limits, and enforcement.

## Outbound IP addresses [#outbound-ip-addresses]

Copy your organization's configured addresses in `/32` format and allowlist **every listed address** on the destination firewall. Contact Sim support or your deployment administrator to configure dedicated IPs and confirm coverage for the connections you use.

### Connection coverage [#connection-coverage]

Dedicated routing supports public IPv4 destinations over HTTPS on port 443. Its coverage depends on the connection:

| Connection | Routing behavior |
| - | - |
| Supported Search connector API requests, HTTP request blocks, MCP and A2A connections, and HTTP requests through Sim's local Function runtime | Use the organization's dedicated routing assignment; background jobs use the same assignment |
| Native database connections, AWS SDK integrations, remote sandbox traffic, and browser requests | Keep their existing network paths |
| Google Drive, Fireflies, Google Workspace user and group discovery, and Atlassian OAuth site discovery | Currently keep their existing network paths |
| Other provider SDKs and OAuth authorization or token refresh calls | Require separate coverage confirmation |

Dedicated IPs do not change permissions in connected services. If dedicated routing is unavailable, affected requests fail instead of using shared IPs. Organizations without dedicated routing keep their existing behavior.

## Self-hosted availability [#self-hosted-availability]

The outbound IP section is available to organization administrators on self-hosted deployments. Session controls appear when session policies are enabled. See [Self-hosted enterprise](/platform/enterprise/self-hosted).