Authentication Preferences is a page where you can specify if you are using challenge questions, e-PIN and/or two-factor authentication. You can also specify the number of days that the User or New Hire should complete their self registration, before the link expires.
Who can access Authentication Preferences?
System Administrators are the only users who have access to Authentication Preferences.
How do you access Authentication Preferences?
Through the menu icon, under Authentication, click "Authentication Preferences".
Menu
What do the fields mean in Authentication Preferences?
The following fields in Authentication Preferences can be changed based on the requirement.
Authentication Preferences Page
Click here to understand what each field means
Field
Action
If checked on, users and new hires are asked to answer their challenge questions each time they log into the system. For more details on verifying the challenge questions, please click here.
If checked off, no challenge questions are presented
By default, the system is delivered with "Email" option selected for the delivery method. Note: For existing customers, if two-factor authentication is not activated within their Organization, they will notice that it is now enabled, offering both Email and SMS as authentication methods. If the Organization already has two-factor authentication enabled with authentication methods in place, there will be no modifications.
The System Administrator can modify this delivery method by selecting the preferred option in the setup, based on how they want the user verification to be done within their organization. Depending on the option selected in this dropdown, users and new hires will be prompted to confirm their identity via email and/or telephone during self-registration and each subsequent login to the system.
Note: If the country code of the user's telephone number is not equal to "001" (country other than USA), then irrespective of the delivery method selected in two factor authentication, the verification option will always be "Email" in the authentication page.
Enable e-PIN
If checked on, users and new hires are asked to setup their e-PIN at the time of self-registration. For more details, please click here.
If checked off, the user will not be asked to setup their e-PIN at the time of self-registration.
Self Registration link expires after
If days are entered, the self registration link in the email invitation will expire after the days entered. The users and new hires have to use the link before it expires.
If no value is entered, the self registration link will not expire.
Allow same user account for multiple invitations
If checked on, the feature to link the User ID to multiple primary invitations is enabled. As default, this value is checked on. To view the details of adding multiple invitations to a same user account for New Hires and Admin Users, please click on the respective links.
If checked off, the feature to link the User ID to multiple primary invitations is disabled.
Enable User Account Lock
If checked on, options are displayed to lock accounts on terminated or completed invitations.
By specifying the number of days in both or either of the fields, the System Administrator can set a lock on the user accounts associated with it after the mentioned days. Locking the account prevents users from accessing the system.
If checked off, no locking will be enforced on the user accounts.
