Water-utility contractors may reach a vendor portal only during business hours. Which control sets that window for the SaaS identity flow?
Select an answer to reveal the explanation.
Short Explanation
Business hours for a SaaS login live at the Access bouncer, not on an NSX clock in the datacenter. Put the window on the Access policy. Time-based DFW is for east-west VM traffic, not the IdP handshake to a vendor portal.
Full Explanation
User-to-SaaS access windows are enforced in Workspace ONE Access with time-based policy conditions or scheduled policy enablement. NSX-T time-based distributed firewall rules apply to datacenter traffic, not to the Access identity flow for a vendor portal. Sensor uninstalls and Safari restriction profiles do not implement Access business-hour SSO.