Enabling advanced security

PerfectQuote values the security of your organization, users and clients, and offers various security settings to accommodate your firm and clients' policies and regulations. In order to manage these settings, you must be a Firm Admin.

• Multi-factor authentication - require users to provide additional security code when logging into the PerfectQuote application.
• Private census - member & dependent names truncated to one character.
• IP whitelisting - require users to access the PerfectQuote application from approved IP addresses.

For Firm Admins:

Go to "Firm Settings" in the left menu, then to the "SECURITY" tab in the top navigation bar.

Multi-factor authentication

If your organization's security policies require multi-factor authentication, then enable this setting, and firm and group users will be required to enter a secondary authentication code (in addition to username & password) to access the PerfectQuote application.

Each user would be required to install an authentication app (such as Google Authenticator) onto their mobile phone.

If your organization has subscribed to our premium Security Package, then you will also have the option to activate the following:

 

Private census (member & dependent names truncated to one character)

If your organization's Personally Identifiable Information ("PII") policy dictates that member/dependent full names cannot pass through an external/3rd party system, then we suggest enabling this setting.

When enabled, within the CENSUS view, first and last names for all members/dependents will automatically be truncated to one character.

For further security, instruct your teams to download the census template indicating "Max 1 Character Names" from the "Forms" section of the application. This xls file will automatically truncate first and last names for all members/dependents, for further PII security.

IP whitelisting

If your organization's security policy restricts access and usage of applications such as PerfectQuote, based on a user's IP address, then please follow these steps:

• Ensure your firm has subscribed to our premium Security Package (additional licensing costs may apply).
• Within your Firm Settings > go the Security tab > edit the view and enable the IP Whitelisting checkbox.
• By default, your current IP will be automatically added to the whitelist, meaning that you will be able to access the PerfectQuote application.
  • If you accidentally delete your own IP, you can re-add it by tapping the "ADD MY IP ADDRESS" button. If you do not do this, you will not be able to access to the PerfectQuote application.
• Enter individual IP addresses or IP ranges, for the users that need to access the PerfectQuote application.
  • You may need to check with your IT department if your teams use VPNs or virtual workspaces/desktops to connect to the internet and applications.
• Tap "ADD" for each IP or set of IPs.
• Note: users attempting to access the application from an unauthorized IP address will still be able to submit their username and password, but then be blocked from accessing the PerfectQuote application. This is due to the ability for user accounts to be active within multiple PerfectQuote firms, ie - not all firms may have IP whitelisting enabled, or may have different IPs whitelisted.

Please contact your PerfectQuote Customer Success manager for additional details.