Security Settings

 
The Security section provides features relating to user authentication, application access, and Single Sign On. Options configured here will affect the entire system.
 
Security Settings
 
 
1

Enforce Password Policy

1. Enforce Password Policy
 
If enabled, a variety of further password-related items are made available for configuration, and password expiry and length limits are enforced.
 
2

Require Uppercase Characters

2. Require Uppercase Characters
 
If enabled, users must include a upper-case character when changing their password.
 
This option is only available if Enforce Password Policy is enabled.
 
3

Require Lowercase Characters

3. Require Lowercase Characters
 
If enabled, users must include a lower-case character when changing their password.
 
This option is only available if Enforce Password Policy is enabled.
 
4

Require Number Characters

4. Require Number Characters
 
If enabled, users must include a numeric character when changing their password.
 
This option is only available if Enforce Password Policy is enabled.
 
5

Require Symbol Characters

5. Require Symbol Characters
 
If enabled, users must include a symbol-type character when changing their password.
 
This option is only available if Enforce Password Policy is enabled.
 
6

Password Expiration

6. Password Expiration
 
The number of days a password is valid for before it needs to be changed by the user.
 
This option is only available if Enforce Password Policy is enabled.
 
7

Minimum Password Length

7. Minimum Password Length
 
The minimum length of a password that can be set for users.
 
This option is only available if Enforce Password Policy is enabled.
 
8

Prevent Using Previous Passwords

8. Prevent Using Previous Passwords
 
If enabled, users cannot reuse a recent password when changing their password.
 
This option is only available if Enforce Password Policy is enabled.
 
9

Maximum Login Attempt Failures

9. Maximum Login Attempt Failures
 
How many failed login attempts a user can make before they are automatically temporarily locked out. It can range between 1 and 100 attempts.
 
10

Login Failure Lockout Duration

10. Login Failure Lockout Duration
 
How long (in minutes) a user will be locked out for if they trigger the automated lock for failed login attempts. It can range between 1 and 60 minutes.
 
11

Accepted Origins

11. Accepted Origins
 
Scripting will accept external connections from any hostnames specified in this list. If no options are configured or it has a value of *, then all originating hostnames are permitted (global whitelist).
 
Note: If using an SSO authentication scheme, then this option must either be a globally whitelisted or include the SSO's origin. Failure to do so will cause login attempts to be rejected as from an untrusted origin.
 
12

Enable Password Reset Request

12. Enable Password Reset Request
 
If enabled, then the login screen will offer the ability to request a password reset. This requires that the user has a configured email address, that the Email (Outgoing) settings are configured and accurate, and that the Message Processing service is active.
 
For security reasons, the user will be given no indication if they enter a non-existent username into the request. They will also see a notification that an email has been sent, even if it is waiting in the queue with non-functional mail credentials or a disabled Message Processing service.
 
13

Remember Me

13. Remember Me
 
If enabled, login details will be remembered following the next successful login.
 
14

Single Sign On Only

14. Single Sign On Only
 
If enabled, then login will only be allowed via Single Sign On. This option is only enforced if there is at least one Single Sign On connector that is currently active.