The OnSemble Mobile Application offers two methods of connection:
If you want to access the mobile app from any physical location (from your desk at the office, or while you're at home or on the go), your portal URL must be externally accessible. This means having a "Fully Qualified" URL like this: https://portal.organization.com, as well as appropriate access through your organization's firewall.
Internal Access Only:
If your portal URL is not externally-facing or fully-qualified like the example shown above, the mobile app can still be used by end users, but only while connected to the organization's network. If the user leaves the internal network, the mobile application will cease to function until the user returns to the office and reconnects to the internal network.
Time Restricted Access:
This requires access to Active Directory Users and Computers. Find the user that you want to restrict access for. Right click on user and select properties. Account tab. Logon Hours, this is where you can disable login hours (outside normal working hours). This will affect their account globally (not just for the Mobile App and/or portal).