Skip to main content

Can I Restrict Work Locations with GPS and IP?

Updated this week

Do you want to manage attendance so that members can only start and end work at the office or designated work locations?

We will guide you from the setup method to how the feature works.

Basic Setup for Work Location Restrictions

  • In flex, you can restrict clock-in/clock-out entries by setting up GPS or IP. Please follow the path below to configure the basic settings!

    • GPS-based work location setup: [Settings] → [Work Locations] → [Add Work Location]

    • Allowed IP setup: [Settings] → [Security & Authentication Settings] → Enable [Access Allowed IP].
      Super administrators are not subject to IP restrictions by default. If you enable the [Apply to Super Admin] option, even super administrators will be subject to IP restriction settings.

Restricting with GPS

Work Location Settings Applied to All Members

When adding a work location, if you set the target to [All], the work location will apply to all members in your company.

When GPS (work location) is set, members can only start and end work through the mobile app.

  • After clicking [Add Work Location], select [All] as the target, then enter the work location name and address.

    • Radius setting: You can designate the work location up to your desired radius. The minimum configurable radius is 100m. For areas with many high-rise buildings, we recommend setting the GPS radius to at least 1km.

      • You can select from distances in the list or enter a value directly for the radius setting.

      • Detailed address: This is not reflected in the actual GPS permission check, but can be used for management purposes to record the detailed location of a work location.

Work Location Settings Applied by Organization

When adding a work location, if you set the target to [By Organization], the work location will apply only to members belonging to the selected organization.

When GPS (work location) is set, members can only start and end work through the mobile app.

  • After clicking [Add Work Location], select [By Organization] as the target, then select the organization to apply the work location (GPS) to.

    • As shown in the example image below, if you select an organization called [Jamsil Branch], members belonging to the Jamsil Branch can only start and end work at the work location (GPS) set by the administrator.

    • Radius setting: You can designate the work location up to your desired radius. The minimum configurable radius is 100m. For areas with many high-rise buildings, we recommend setting the GPS radius to at least 1km.

      • You can select from distances in the list or enter a value directly for the radius setting.

      • Detailed address: This is not reflected in the actual GPS permission check, but can be used for management purposes to record the detailed location of a work location.

  • Once you have completed the work location settings, go to [Settings] → [Work Policy & Approval] → [Click Work Policy] → [Off-site Work Registration Restriction] and set it to Restrict by GPS only.

    • When the off-site work registration restriction option is set to 'Restrict by GPS only', work can only be recorded through the flex mobile app. If you press the work widget at a location other than the designated work location, [Restricted] will appear next to the work policy and you will not be able to start or register work. In other words, when starting work, you must be at the work location set by the administrator to start/register work.

  • If you attempt to start work at a location other than the set work location, it will be restricted as shown in the image below.

    • In areas with many high-rise buildings, location detection may be difficult, so please set the radius to 1km or more!

Restricting with IP

  • If you have set up access allowed IPs, go to [Settings] → [Work Policy & Approval] → [Click Work Policy] → [Off-site Work Registration Restriction] and set it to Restrict by IP only.

  • When set to restrict by IP only, both PCs connected to that IP and mobile devices connected to that IP (via wifi) can record work.

  • If you attempt to start work from a location without a registered allowed IP, it will be restricted as shown in the image below.

    • If work start is restricted even though the IP is allowed, please make sure to check your wifi connection!

      If you connect via LTE, the IP will not be recognized, so please make sure to turn off mobile data and connect only via wifi.

      If work start is still restricted even after connecting to wifi, please close the flex app → connect to wifi → relaunch the flex app.

Restricting with a GPS and IP Hybrid

  • If you have set up both work locations and allowed IPs, go to [Settings] → [Work Settings] → [Click Work Policy] → [Off-site Work Registration Restriction] and set it to Restrict by GPS or IP.

    • When set to restrict by GPS or IP, if either one passes, work entry is allowed. However, since GPS can only determine the work location on mobile, on PC it is determined by IP only.

Off-site Work Registration Settings

The off-site work registration feature allows you to end or modify work outside the work location when you forgot to press end work before leaving.

  • Click [Settings] → [Work Policy & Approval] → [Off-site Work Registration].

    • To restrict ending and modifying work outside the work location, leave the approval/reference fields empty.

    • To allow ending and modifying work outside the work location, set the approval/reference fields.

      • Even if only a reference person is set, ending and modifying work outside the work location is possible.

  • When approval/reference is set, the administrator will receive a notification as shown in the image below.

    • You can see how far from the set work location the member ended or modified their work.

    • Exact distance is shown for 1km or more, and for less than 1km it displays Work was modified/ended from less than 1km away.


FAQ

I have automatic work tracking set up. Is it subject to GPS or IP restrictions?

Already configured automatic work tracking is not subject to restrictions. To enforce work location restrictions, please turn OFF the automatic work tracking feature!

Is registering recurring schedules subject to GPS or IP restrictions?

If you are located outside the work location at the time of registering a recurring schedule, registration will be restricted.

However, for example, if you have pre-registered a recurring schedule of field work → office work (GPS or IP restricted), the transition from field work to office work will happen automatically without GPS restriction.

After finishing 'Work' at an allowed work location using the work entry tool (manual entry from the work graph), can I enter a work policy not subject to GPS or IP restriction (e.g., remote work)?

When registering through the work entry tool, the work for that date, including remote work, is re-registered.

Therefore, if you registered 'Work' at the work location and then register 'Remote Work' from home, the GPS or IP restriction settings for 'Work' will activate again and determine whether you are inside or outside the work location.

In this case, it works as follows:

  • If the approver/reference person in the off-site work registration settings is empty → Off-site work registration is restricted

  • If the approver/reference person in the off-site work registration settings is configured → A 'work modified outside work location' notification is sent to the approverreference person and registration is allowed

I'm curious about the difference between GPS and IP restriction.

When GPS restriction is set, work location can only be determined on mobile, so only work recording through the mobile app is possible. If this setting is enabled, starting and modifying work on PC (web) is completely restricted.

If IP restriction is set, work recording is possible on both mobile and PC (web) environments.

Can I configure different restriction settings for specific members or work locations?

When adding a GPS (work location), you can choose whether to apply it to all members or only to members belonging to a specific organization. As shown in the example image below, if you select an organization called [Jamsil Branch], members belonging to the Jamsil Branch can only start and end work at the work location (GPS) set by the administrator.

However, applying a specific work location to only a 'specific member' rather than an organization is not directly supported, but you can use a workaround. Once you set up a work location, you can configure whether each work policy should be subject to GPS restriction in Settings -> Work Policy & Approval -> Work Policy. If only a specific department or member will use the GPS-only restriction feature, you need to create a work policy and configure the settings separately for that policy as shown in the example below. However, please note that work policies are visible to all members when created.

Can I set it so that work-from-home/remote work or field work/business trips are not subject to work location restrictions?

Off-site work registration restriction settings can be configured for each work policy!

Please create a work policy and configure the settings, then guide members to record their work under the appropriate policy.

I have set up IP restrictions, but work can still be started outside the configured work locations. Why is that?

If IP restrictions are set, using flex will be restricted unless connected to the wifi of the configured IP.

However, if the member who attempted to record work has super administrator permissions, IP restrictions will not apply.

Please check in Settings - Permission Settings whether the member has super administrator permissions.

I added a GPS (work location), but it seems like members cannot detect the GPS (work location) when starting work.

  • If after adding GPS, members seem unable to load the GPS (work location) added by the administrator when starting work, please check if the off-site work registration restriction is enabled with the GPS-only restriction option in the left menu bottom Settings - Work Policy / Approval - click Work Policy. Also, the GPS feature only allows starting work through the mobile app :) This is because GPS determines whether you are within the GPS access range by receiving location data from the connecting device in real-time!

    Therefore, starting / ending work is only possible through the [app], not the web.

If off-site work registration approval is set, does an approval occur when a member clocks in and out outside the work location?

If off-site work registration approval is set, an approval does not occur when a member clocks in and out outside the work location. When off-site work registration approval is enabled, an approval only occurs when a member 'clocks out' outside the work location. When 'clocking in', instead of an approval, starting or registering work is restricted. In other words, when clocking in, work can only be started within the work location set by the administrator.

Did this answer your question?