IP Restriction

The IP Restriction feature allows businesses to limit access to MyTime’s web and mobile apps based on a user's network. By whitelisting specific IP addresses or domains, businesses can control who can access or edit information in MyTime. This is particularly useful for ensuring that access is limited to in-store or authorized networks.

Things to know:

• IP restrictions are controlled by a hidden setting. To enable it, please contact MyTime Support at support@mytime.com.
•  Static vs. Dynamic IPs:
  • Static IPs remain the same each time you connect to the internet
  • Dynamic IPs may change frequently, which means you might need to regularly update your IP list 
• Automatic IP Sync: When your dynamic IP changes, MyTime will automatically whitelist the new IP within 5 minutes.
• We Recommend: Use a static public IP address for best results. Contact your Internet Service Provider (ISP) to request one:
  • Google Fiber - https://support.google.com/fiber/answer/6032604?hl=en
  • Comcast - https://business.comcast.com/support/article/internet/using-a-static-ip 
• You can visit https://whatismyipaddress.com to view your current public IP
• MyTime supports whitelisting by both IP address and Fully Qualified Domain Name (FQDN). If you're using a dynamic IP, consider setting up a Dynamic DNS.
• FQDN IP Caching: The IP address tied to a domain name is cached for 5 minutes. Updates to the domain’s IP may take up to 5 minutes to take effect.

Contents

• Setting Up Allowed IPs
• Viewing Information Outside of Authorized IPs
• Enforce IP Restrictions

Setting Up Allowed IPs

Once the hidden setting is enabled: 

1. Navigate to Business Setup > Settings
2. Locate the IP restriction settings:
   • Authorized IPs: Enter static IP addresses separated by commas
   • Authorized FQDNs: Enter domain names separated by commas (useful for dynamic IP setups). This allows you to restrict access to MyTime even if you don't have a static IP address. To create a dynamic DNS, visit: https://my.noip.com/dynamic-dns.
3. Save

Viewing Information Outside of Authorized IPs 

If users access MyTime from an unauthorized IP address or domain, you can allow them to view—but not edit—information by enabling the "Allow viewing but not editing information when outside of authorized IPs" setting. 

To enable this setting:

1. Go to Business Setup > Settings
2. Enable “Allow viewing but not editing information when outside of authorized IPs”
3. Save 

Example: A staff member can see the appointment schedule but won’t be able to make changes from an unauthorized network. If editing is attempted, users will see, "There was an error: You are not authorized to perform this action from this location."

Enforce IP Restrictions

Once allowed IP addresses have been configured, you can choose to exempt specific staff members from IP restrictions.

Things to know:

• IP restrictions are enforced for all staff by default
• Only users with the Assign Roles access control can disable IP restrictions for other staff members

To disable IP restrictions for a specific staff member:

1. Navigate to Business Setup > Staff & Availability
2. Open the desired staff member's profile
3. Uncheck the "Enforce IP Restriction" checkbox
4. Save your changes

If you have any questions, please contact our support team at support@mytime.com.