How to Configure IP Restrictions & Check-In/Out Controls in Horilla HRMS

As remote work, hybrid setups, and decentralized teams become the norm, HR professionals face mounting challenges in ensuring attendance accuracy and preventing time-related fraud. Horilla Open Source HRMS rises to meet these demands by equipping organizations with two powerful, customizable tools, IP Restrictions and Check-In/Out Controls.

These features enable HR administrators to define how, when, and where attendance can be recorded, creating a balance between security, flexibility, and accountability.

IP Restrictions:

What Are IP Restrictions in Horilla?

IP Restrictions in Horilla HRMS allow administrators to define a list of approved IP addresses (or network ranges) from which employees are permitted to mark attendance. This means employees must be physically connected to authorized company networks — such as the office Wi-Fi or a corporate VPN — to clock in or out.

This feature ensures attendance integrity, especially in on-site or high-security environments.

Key Benefits:

• Eliminate Remote Attendance Fraud: Only users within approved networks can record attendance, preventing manipulation from unauthorized locations.
  
• Branch-Level Flexibility: Different IPs can be assigned to different office branches, offering tailored controls across locations.
  
• Broad Network Support: Add entire IP ranges or prefixes for larger networks or VPNs.
  
• Administrative Clarity: A clean interface displays all IP restrictions with status indicators and action buttons.

Managing IP Restrictions in Horilla HRMS:

Administrators can easily:

• Add or remove approved IPs
• Define subnet-level access
• Toggle restriction states (enabled/disabled)
• View all configured entries in a centralized table

This ensures quick adjustments when new locations are added or network changes occur.

Check-In/Out Controls: Flexible Yet Secure Attendance Options

Feature Overview
Horilla supports three primary attendance marking methods:

1. Web Portal
2. Mobile App
3. Biometric Devices

With Check-In/Out Controls, administrators can enable or disable any of these methods — either company-wide or per branch — based on operational requirements.

Common Use Cases:

1. Biometric-Only Workplaces
Use fingerprint scanners or facial recognition devices for high-trust environments. Disable web and mobile methods to ensure physical presence.

2. Remote/Hybrid Teams
Enable web and mobile check-ins for remote staff while keeping on-site employees tied to biometric or IP-based access.

3. Branch-Specific Attendance Policies
Tailor check-in methods based on local policies, infrastructure, or compliance requirements at each office location.

Configuration Path in Horilla:

Settings → Attendance → Check-In/Check-Out

Administrators can:

• Enable/disable individual check-in methods
• Apply rules to specific branches or the entire organization
• Integrate with other attendance policies such as IP restrictions and shift timings

Combining IP Restrictions with Check-In/Out Controls

The real power lies in combining both features to create robust attendance protocols:

1. High-Security Offices

• Allow only biometric check-ins
• Restrict devices to operate within authorized IP ranges
• Disable all web and mobile-based check-ins

2. Secure Yet Flexible Setups

• Enable mobile/web check-ins for remote workers
• Enforce IP-based access via company VPNs
• Keep biometric options active for office-based teams

3. Distributed & Multi-Branch Organizations

• Set unique IPs and check-in methods for each branch
• Manage access policies from a central dashboard
• Ensure consistency across all locations with branch-level customization

Best Practices for a Smooth Implementation

1. Define Clear Attendance Policies

• Outline who can check in from where and using which methods.
• Ensure policies are documented and communicated.

2. Phased Rollout

• Pilot the features with select teams.
• Use feedback to refine configurations before scaling.

3. Routine Policy Audits

• Review allowed IPs every quarter.
• Verify that check-in methods are aligned with current work models.

4. Train and Communicate

• Educate employees on how and where they are expected to check in.
• Provide support documentation and help channels.

5. Backup & Emergency Protocols

• Define what happens during power/network failures.
• Allow temporary overrides for valid exceptions.

Technical Considerations for Admins

1. Network Configuration

• Ensure static IPs for biometric devices and secure office networks.
• Coordinate with IT when making infrastructure changes.

2. Mobile VPN Compatibility

• For mobile users, consider company VPNs to ensure valid IP ranges.
• Monitor mobile IP volatility due to ISP behavior.

3. Biometric Device Integration

• Choose devices compatible with Horilla HRMS.
• Schedule periodic device maintenance and software updates.

Conclusion

Horilla HRMS gives modern organizations the tools they need to secure their attendance systems without compromising flexibility. Whether your team is entirely remote, branch-based, or operating from high-security zones, Horilla’s IP Restrictions and Check-In/Out Controls let you design attendance policies that fit your needs.
With its open-source architecture, Horilla HRMS provides full transparency and adaptability, allowing developers and HR teams to build on top of a robust and extensible attendance framework.