Authentication Preferences is a page where you can specify if you are using challenge questions, e-PIN and/or two-factor authentication. You can also specify the number of days that the User or New Hire should complete their self registration, before the link expires.
Who can access Authentication Preferences?
System Administrators are the only users who have access to Authentication Preferences.
How do you access Authentication Preferences?
Through the menu icon, under Authentication, click "Authentication Preferences".
Menu
What do the fields mean in the Authentication Preferences page?
You can change any of the fields under Authentication Preferences.
Authentication Preferences Page
Click here to understand what each field means
Field
Action
If checked on, users and new hires are asked to answer their challenge questions each time they log into the system. For more details on verifying the challenge questions, please click here.
If checked off, no challenge questions are presented
If checked on, a drop down for "Delivery Method" will display on the page.
By default, the system is delivered with "Enable Two Factor" option checked and "Email" option selected in the Delivery Method drop down. The System Administrator can alter this authentication setup based on how they want the user login verification to be done in the organization. For more details, please click here.
Based on the option selected in "Delivery Method" the users and new hires are asked to verify their identity through email and/or telephone when they self register, and each time they log into the system.
If no option is selected in Delivery Method for Two factor authentication, then the following error displays on the page:
Note: If the country code of the user's telephone number is not equal to "001" (other than USA), then irrespective of the value selected in "Delivery Method" for Two Factor authentication, the verification option will always be "Email" in the authentication page.
If Two factor authentication is checked off, no validation of email or telephone is required
Enable e-PIN
If checked on, users and new hires are asked to setup their e-PIN at the time of self-registration. For more details, please click here.
If checked off, the user will not be asked to setup their e-PIN at the time of self-registration.
Self Registration link expires after
If days are entered, the self registration link in the email invitation will expire after the days entered. The users and new hires have to use the link before it expires.
If no value is entered, the self registration link will not expire.
Allow same user account for multiple invitations
If checked on, the feature to link the User ID to multiple primary invitations is enabled. As default, this value is checked on. To view the details of adding multiple invitations to a same user account for New Hires and Admin Users, please click on the respective links.
If checked off, the feature to link the User ID to multiple primary invitations is disabled.
Enable User Account Lock
If checked on, options are displayed to lock accounts on terminated or completed invitations.
By specifying the number of days in both or either of the fields, the System Administrator can set a lock on the user accounts associated with it after the mentioned days. Locking the account prevents users from accessing the system.
If checked off, no lock is required on user accounts.
