Versions Compared

Version Old Version 21 New Version 22
Changes made by

SriGowri Aspari

SriGowri Aspari

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

Table of Contents

What is Authentication Preferences?

Authentication Preferences is a page where you can specify if you are using challenge questions, e-PIN and/or two-factor authentication.  You can also specify the number of days that the User or New Hire should complete their self registration, before the link expires.

Who can access Authentication Preferences?

System Administrators are the only users who have access to Authentication Preferences.

How do you access Authentication Preferences?

Through the menu icon, under Authentication, click "Authentication Preferences".

Menu



What do the fields mean in

the

Authentication Preferences

page

?

You can change any of the fields under Authentication PreferencesThe following fields in Authentication Preferences can be changed based on the requirement. 

Authentication Preferences Page

Image RemovedImage Added





Expand
titleClick here to understand what each field means


Field
Action
  • If checked on, users and new hires are asked to answer their challenge questions each time they log into the system. For more details on verifying the challenge questions, please click here.
  • If checked off, no challenge questions are presented
If checked on, a drop down for "
" will display on the page.
  • By default, the system is delivered with "Enable Two Factor" option checked and "Email" option selected in the Delivery Method drop down. for the delivery method. Note: For existing customers, if two-factor authentication is not activated within their Organization, they will notice that it is now enabled, offering both Email and SMS as authentication methods. If the Organization already has two-factor authentication enabled with authentication methods in place, there will be no modifications.
  • The System Administrator can alter this authentication setup modify this delivery method by selecting the preferred option in the setup, based on how they want the user login verification to be done in the within their organization. For more details, please click here.

Image Removed

Based
  • Depending on the option selected in
"Delivery Method" the
  • this dropdown, users and new hires
are asked to verify
  • will be prompted to confirm their identity
through
  • via email and/or telephone
when they self register, and each time they log into
  • during self-registration and each subsequent login to the system.

Image Removed

If no option is selected in Delivery Method for Two factor authentication, then the following error displays on the page:

 Image RemovedImage Added


Note: If the country code of the user's telephone number is not equal to "001" (country other than USA), then irrespective of the value delivery method selected in "Delivery Method" for Two Factor two factor authentication, the verification option will always be "Email" in the authentication page. 

If Two factor authentication is checked off, no validation of email or telephone is required

Enable e-PIN

  • If checked on, users and new hires are asked to setup their e-PIN at the time of self-registration. For more details, please click here.
  • If checked off, the user will not be asked to setup their e-PIN at the time of self-registration.
Self Registration link expires after 
  • If days are entered, the self registration link in the email invitation will expire after the days entered. The users and new hires have to use the link before it expires.
  • If no value is entered, the self registration link will not expire.
Allow same user account for multiple invitations
  • If checked on, the feature to link the User ID to multiple primary invitations is enabled. As default, this value is checked on. To view the details of adding multiple invitations to a same user account for New Hires and Admin Users, please click on the respective links.
  • If checked off, the feature to link the User ID to multiple primary invitations is disabled. 
Enable User Account Lock
  • If checked on, options are displayed to lock accounts on terminated or completed invitations.
    Image Removed
    Image Added

By specifying the number of days in both or either of the fields, the System Administrator can set a lock on the user accounts associated with it after the mentioned days. Locking the account prevents users from accessing the system.

  • If checked off, no lock is required on locking will be enforced on the user accounts.