# Require login from Zone

**URL:** <https://forum.inductiveautomation.com/t/require-login-from-zone/40319>\
**Category:** Ignition\
**Tags:** security\
**Created:** [November 4, 2020, 10:57pm UTC](https://forum.inductiveautomation.com/t/require-login-from-zone/40319 "2020-11-04T22:57:05Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![erik](https://avatars.discourse-cdn.com/v4/letter/e/b5ac83/32.png) [@erik](https://forum.inductiveautomation.com/u/erik)\
**Post date:** [November 4, 2020, 10:57pm UTC](https://forum.inductiveautomation.com/t/require-login-from-zone/40319/1 "2020-11-04T22:57:05Z")

</div>

I would like to setup security so when devices are on a local network they do not require login but when connecting remotely a user login is required.  
I’ve setup Zones and tested them however the levels must match option is either all or any. I’d like to set it to either (Authenticated and Remote) OR Onsite.

![image](https://us1.discourse-cdn.com/inductiveautomation/original/3X/3/b/3b2c32c07b34563b1e6f19b8d47a8eaa89ed1bfb.png)

---

<div class="post-metadata">

**Author:** ![jspecht](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/jspecht/32/6465_2.png) [@jspecht](https://forum.inductiveautomation.com/u/jspecht)\
**Post date:** [November 5, 2020, 1:14am UTC](https://forum.inductiveautomation.com/t/require-login-from-zone/40319/2 "2020-11-05T01:14:39Z")

</div>

For more complex logic, you could create a new custom security level. In your IdP(s), you can create a rule which checks for the conditions you want using an expression.
