Myriad ways, pretty standard on most corporate networks, to restrict access to corporate devices. I cannot access any of my client's resources, including Web apps, without their laptop.
Simple method is IP whitelisting, easy in some ways painful to keep updated. Vpn is another easy option. But then you can have client side certs, hardware tokens, and endpoint security mechanisms which are probably more robust. Either way, it's not a weird unique thing, it's pretty ubiquitous :)
Simple method is IP whitelisting, easy in some ways painful to keep updated. Vpn is another easy option. But then you can have client side certs, hardware tokens, and endpoint security mechanisms which are probably more robust. Either way, it's not a weird unique thing, it's pretty ubiquitous :)