All access to the application is authenticated. In the case of the on-premise version, user authentication integrates with Active Directory.
To secure access to the system, there is an option to require two-factor authentication (integration with Google Authenticator).