Security

Organization owners and admins open Settings → Organization → Security to manage session policies and view outbound IP addresses. On Sim Cloud, this page requires an Enterprise organization.

Session policies

Set session lifetime and idle limits, or use Sign out all members to revoke member sessions except your current session. This action does not revoke API keys.

See Session policies for setup, defaults, limits, and enforcement.

Outbound IP addresses

Copy your organization's configured addresses in /32 format and allowlist every listed address on the destination firewall. Contact Sim support or your deployment administrator to configure dedicated IPs and confirm coverage for the connections you use.

Connection coverage

Dedicated routing supports public IPv4 destinations over HTTPS on port 443. Its coverage depends on the connection:

Connection	Routing behavior
Supported Search connector API requests, HTTP request blocks, MCP and A2A connections, and HTTP requests through Sim's local Function runtime	Use the organization's dedicated routing assignment; background jobs use the same assignment
Native database connections, AWS SDK integrations, remote sandbox traffic, and browser requests	Keep their existing network paths
Google Drive, Fireflies, Google Workspace user and group discovery, and Atlassian OAuth site discovery	Currently keep their existing network paths
Other provider SDKs and OAuth authorization or token refresh calls	Require separate coverage confirmation

Dedicated IPs do not change permissions in connected services. If dedicated routing is unavailable, affected requests fail instead of using shared IPs. Organizations without dedicated routing keep their existing behavior.

Self-hosted availability

The outbound IP section is available to organization administrators on self-hosted deployments. Session controls appear when session policies are enabled. See Self-hosted enterprise.