Hi Gennie,

In OutSystems there is no straight forward configurations to apply at applications level to make them internal or external. However here are possible strategies you can explore to address your situation.

1. Identify set of user roles which are only meant for internal end users. Then, add ONLY those roles to the application that you want to be accessible to internal users. This way your application becomes accessible to only internal end users.

2. Configure internal network, but this applies only to traditional web applications.

https://success.outsystems.com/documentation/11/security/configure_an_internal_network/

3. Another option could be to classify end users as internal or external.

https://success.outsystems.com/documentation/11/user_management/end_users/

https://success.outsystems.com/documentation/11/user_management/classify_users_as_internal_users/

If you ask me, I would rather go for the first option because that way I don't put any hard restrictions at the platform level.

Hope it helps!

Junaid

hallo @GENNIE ARGUELLES , 

yes you can ,

Internal Access (via VPN):

• You can configure a Virtual Private Network (VPN) to allow users within your internal network to securely access the application.
• Users can access the app through a private URL that’s not exposed publicly, making it available only to users connected to the internal network.

External Access (Public):

• For external users, you expose a public URL for the application.
• You need to ensure proper security mechanisms, such as HTTPS, strong authentication, and possibly a reverse proxy, to handle the public traffic.
• work throw APIs

Example Scenario: 

• Internal users access it via http://internal.mycompany.com (through VPN).
• External users access it via https://app.mycompany.com

For Traditional Web Apps hosted on-premise, you can configure internal networks that are allowed to access your application.

For Reactive Apps, there isn't an out-of-the-box solution. However, you can use a reverse proxy like NGINX. This can be configured to allow access only from specific IP addresses (such as those assigned during VPN connections) when accessing certain applications.

Let me know if you'd like to discuss this further.