Workspaces on the Team plan or higher can require Google Workspace SAML SSO. Enable it in Settings › Security › SSO.
You can restrict the source IPs that may call the API. CIDR is supported.
192.0.2.0/24
198.51.100.10/32| Item | Default | Range |
|---|---|---|
| Session length | 12h | 1h–168h |
| Idle timeout | 1h | 15m–24h |
| 2-step verification | optional | required / optional |