Login
Within the Login tab, you can control how users access ampEducator, manage session settings, and restrict login access based on location, VPN usage, or specific IP addresses.

Login Settings
You can configure general login behavior and access restrictions using the following options:

- Login With Email: When enabled, users can log in using their email address instead of a username.
- Allow Remember Me: Allows users to stay logged in by selecting the “Remember Me” option at login.
- Staff / Student Session Timeout: Sets the number of minutes before a session times out due to inactivity. Entering 0 disables session timeout entirely (not recommended for security reasons). Note that session timeout affects how login times are recorded.
Geolocation
Geolocation allows you to restrict login access based on the user’s geographic location.
When Enable Geolocation is selected, additional options will appear:

- Enabled Countries: Select the countries that users are allowed to log in from. Only login attempts originating from IP addresses within these countries will be permitted.
Users attempting to log in from outside the selected countries will be blocked and may receive a 403 Forbidden message.
VPN Blocking
VPN blocking can be used alongside geolocation to prevent users from logging in through VPN services. When enabled, login attempts from detected VPNs will be blocked and reflected in User Logins with a status of Blocked VPN.
VPN blocking must be enabled by ampEducator. This is a paid feature. Please contact [email protected] to have it set up for your institution.
Login Blocked IPs
The Login Blocked IPs section allows you to prevent access from specific IP addresses or ranges.

To block an IP address, click Add Blocked IP. This will open the Add Login Blocked IP window.

IP Addresses: Enter one or more IP addresses or CIDR ranges to block. Each entry must be on a separate line.
Once added, any login attempts from these IPs will be blocked and reflected in User Logins with a status such as Blocked IP.