Versions Compared

Version Old Version 22 New Version Current
Changes made by

SriGowri Aspari

SriGowri Aspari

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

Table of Contents

What is Authentication Preferences?

Authentication Preferences is a page where you can specify if you are using challenge questions, e-PIN and/or two-factor authentication.  You can also specify the number of days that the User or New Hire should complete their self registration, before the link expires.

Who can access Authentication Preferences?

System Administrators are the only users who have access to Authentication Preferences.

How do you access Authentication Preferences?

Through the menu icon, under Authentication, click "Authentication Preferences".

Menu



What do the fields mean in Authentication Preferences?

The following fields in Authentication Preferences can be changed based on the requirement. 

Authentication Preferences Page

Image RemovedImage Added





Expand
titleClick here to understand what each field means


Field
Action
  • If checked on, users and new hires are asked to answer their challenge questions each time they log into the system. For more details on verifying the challenge questions, please click here.
  • If checked off, no challenge questions are presented
    • If checked on, a drop down for "Delivery Method" will display on the page.
    • By default, the system is delivered with "Enable Two Factor" option checked and "Email" option selected
    • for the delivery method. Note: For existing customers, if two-factor authentication is not activated within their Organization, they will notice that it is now enabled, offering both Email and SMS as authentication methods. If the Organization already has two-factor authentication enabled with authentication methods in place, there will be no modifications.
    • in the Delivery Method drop down. The System Administrator can
    • modify this delivery method by selecting the preferred option in the setup,
    • alter this authentication setup based on how they want the user login verification to be done
    • within their
    • in the organization.
    • Depending

Image Added


Based on the option selected in

this dropdown,

"Delivery Method" the users and new hires

will be prompted to confirm

are asked to verify their identity

via

through email and/or telephone

during self-registration and each subsequent login to the system.Image Removed

when they self register, and each time they log into the system.

Image Added


If no option is selected in Delivery Method for Two factor authentication, then the following error displays on the page:

Image Added


Note: If the user's telephone number is not from USA (country code of the user's telephone number is not

equal to

"001"

(country other than USA

), then irrespective of the

delivery method

value selected in

two factor

"Delivery Method" for Two Factor authentication, the verification option will always be "Email" in the authentication page. 

  • If Two factor authentication is checked off, no validation of email or telephone is required

Enable e-PIN

  • If checked on, users and new hires are asked to setup their e-PIN at the time of self-registration. For more details, please click here.
  • If checked off, the user will not be asked to setup their e-PIN at the time of self-registration.
Self Registration link expires after 
  • If days are entered, the self registration link in the email invitation will expire after the days entered. The users and new hires have to use the link before it expires.
  • If no value is entered, the self registration link will not expire.
Allow same user account for multiple invitations
  • If checked on, the feature to link the User ID to multiple primary invitations is enabled. As default, this value is checked on. To view the details of adding multiple invitations to a same user account for New Hires and Admin Users, please click on the respective links.
  • If checked off, the feature to link the User ID to multiple primary invitations is disabled. 
Enable User Account Lock
  • If checked on, options are displayed to lock accounts on terminated or completed invitations.
    Image Removed
    Image Added

By specifying the number of days in both or either of the fields, the System Administrator can set a lock on the user accounts associated with it after the mentioned days. Locking the account prevents users from accessing the system.

  • If checked off, no locking will be enforced on the user accounts.