Settings

This section covers the configuration of Relution server and organization settings, user management, authentication, certificates and external integrations.

Organizations and tenants #

• Create organizations → — Creating, configuring and managing organizations.
• Global Organization → — Central organization for distributing users, policies, apps and scripts to all organizations.
• Meta Organizations → — Grouping organizations under a Meta Organization that passes apps, policies and other items on to its sub-organizations.
• Language Settings → — User language as well as the languages and default language of the organization.
• Off-Time Configuration → — School holidays and custom periods during which policies are disabled.
• Data Processing Agreement (DPA) → — Concluding the data processing agreement digitally in Relution.

Authentication and identities #

• LDAP Configuration → — Synchronizing users and groups from directory services such as Active Directory.
• Link Microsoft Entra ID → — Synchronizing users and groups from Microsoft Entra ID.
• OIDC with Entra → — Single sign-on (SSO) via OpenID Connect with Microsoft Entra ID; unknown users can optionally be created at their first login.
• OIDC with Workspace → — Single sign-on (SSO) via OpenID Connect with Google Workspace.
• Relution as Identity Provider → — Relution as its own OpenID Connect / OAuth2 Identity Provider (Beta).
• Microsoft Conditional Access → — Access protection for Microsoft 365 and Entra ID.

Login and security #

• Login Management → — Password policy, MFA requirements and failed login attempts per organization.
• Multi-factor authentication → — Securing portal login with an additional email code or authenticator app.
• IP block after failed logins → — Blocking IP addresses server-wide after failed login attempts (Fail2Ban).
• Audit Log → — Tracking activities on the entire server in the global organization.

Certificates #

• Certificate Management → — Managing uploaded certificates and certificates issued to devices.
• Organization Certificates → — APNS push certificate for managing Apple devices.
• Built-In CA → — Integrated certificate authority that issues certificates for devices.
• Certificate Pool → — Importing externally issued certificates as a pool and distributing them via a certificate template.
• TLS Trust Configuration → — Trusted CA certificates for outbound TLS connections and certificate pinning for Apple devices.

System integrations and licenses #

• REST API → — Automation via the REST API and creation of API access tokens.
• TeamViewer → — Remote support for devices directly from the portal, with an included or own license.
• Secure Mail Gateway → — Securing Exchange access of mobile devices with Relution as an ActiveSync proxy.
• Licenses → — Lifetime licenses, license limits for organizations and license management by partners.