Manage Approved Workspaces | Product Guide

This security feature is available to all Enterprise customers. It is also available on Asana Web, Desktop App and mobile devices with iOS 8.77, Android 6.79 or newer.

Overview

Large organisations often use managed devices or networks to secure employee data.

Previously in Asana, admins needed to choose to block or allow all Asana workspaces. Enterprise admins within Asana are now able to manage company network devices or individual employee devices to limit Asana use to only approved workspaces or organizations.

By restricting access to non-approved workspaces and organizations through proxy-based tools like a Cloud Access Security Broker (CASB), admins can help follow internal security controls and keep sensitive data within approved workspaces.

Once Enterprise Admins have configured this solution, they can set an approved list of workspaces and divisions. This will ensure that users on either a managed device or a managed network cannot access unapproved workspaces or organizations.

Enabling Approved Workspaces

To enable this feature, the Enterprise Admin must first configure their solution to send two headers on all Asana requests.

workspace ID

From here:

  1. The first header must include either an Enterprise Domain ID or Enterprise Division ID. This is available in the Admin Console of the settings tab. An example for this header would follow the format Asana-Allowed-Domains-Requester-Id: abc. Note that Divisional admins will need to get in touch with Asana Support to obtain their Division Admin ID in order to configure this header.

  2. The second header must include a comma-separated list of approved domain IDs and would follow the format Asana-Allowed-Domain-Ids: abc,123,xyz. All listed workspace IDs will now be reflected as approved workspaces and organizations.

Asana web will enforce these restrictions on both the initial page load and the WebSocket handshake. If you would like for an open Asana page to update its specific restrictions once the device has switched networks, make sure to include these headers on HTTP requests to WebSocket protocol endpoints (wss://) that are subdomains of the Asana App.

Accessing Unapproved Workspaces

After the configuration of the Approved Workspaces list, there are a few different scenarios whereby users on a managed device or network may be prompted with a contextualized error when trying to access non-approved workspaces.

Logging into an Asana Account without Approved Domains

If you are trying to log in to an Asana account that does not have approved domains, you will be met with the following prompt:

try again

This error will inform you that you are not a member of an approved workspaces and therefore have the option to:

  1. Log Out
  2. Try again (where the browser will again attempt to access the domain).

Switching to an Unapproved Domain on a company network

Attempting to log into a personal workspace or an account with multiple unapproved domains will also prompt a contextualized error.

access workspace

Here you have the option to:

  1. Log out. This will redirect you to the Asana login page where you can log in to a different account.
  2. Try again (after switching networks) whereby the browser will attempt to access the domain again.
  3. If available, you can click on the Access workspace option to access an approved domain.

Attempting to Access an Unapproved Domain from a URL Link

Clicking into an unapproved URL will also prompt a contextualized error.

slack url

not accessible

Similar to the previous scenario, here you have the option to:

  1. Log out (after switching networks). This will redirect you to the Asana login page where you can log in to a different account.
  2. Try again (after switching networks) whereby the browser will attempt to access the domain again.
  3. If available, you can click on the Access workspace option to access an approved domain.

Sorry, we don't support this browser

Asana doesn't work with the internet browser you are currently using. Please sign up using one of these supported browsers instead.

Choose your language

Selecting a language changes the language and/or content on asana.com