You can explore the User Sign-In Policies settings in the Control Panel to choose how rigid or relaxed the sign-in-related and login password-related policies should be.
The User Sign-In Policies settings were designed to be compliant with the GDPR requirements for the EU, so they are also useful to all users worldwide.
To access the User Sign-In Policies settings, click the following icon.
This will open the following form.
Click the Set GDPR defaults for European Union link to populate the default settings for you.
The following are the settings.
Setting | Description |
Session Timeout | Automatically signs out users that are inactive for more than X minutes. |
Require strong passwords | Passwords must be 12 characters long, with at least one number, one capital letter, and one special character. |
Lock user on failed successive sign-ins | Allows you to lock out a user after X number of failed sign-in attempts and choose how long they will be locked out. |
Cannot repeat old passwords | Allows you to set whether or not to allow the reuse of old passwords.
If you choose this option, you can decide how many of the most recent passwords cannot be reused.
This number must be between 1 and 10. |
Must change password every X days | Allows you to force users to change their passwords. |
Minimum password age | Allows you to set a time duration, in hours, before a password change can be made.
This number must be 24 and 300. |
Administrators can set user passwords | Allows you to decide whether or not SI Administrators can set user passwords.
If this option is not selected, a temporary password will be created when a new user is created. |
Enable Two Factor Authentication (2FA). Email user sign in code every X days. | Allows you to require users to utilize a passcode to log in to SI, which will be emailed.
You choose how many days between the email notifications. |
Sync user sign-in policies to Mobile Install | Allows you to enforce the rules above on the Mobile Install web interface. |
Sync user sign-in policies to Customer Portal | Allows you to enforce the rules above on the Customer Portal web interface. |