What is Authentication Preferences?

Authentication Preferences is a page where you can specify if you are using challenge questions, e-PIN and/or two-factor authentication.  You can also specify the number of days that the User or New Hire should complete their self registration, before the link expires.

Who can access Authentication Preferences?

System Administrators are the only users who have access to Authentication Preferences.

How do you access Authentication Preferences?

Through the menu icon, under Authentication, click "Authentication Preferences".

Menu



What do the fields mean in Authentication Preferences?

The following fields in Authentication Preferences can be changed based on the requirement. 

Authentication Preferences Page






Field
Action
  • If checked on, users and new hires are asked to answer their challenge questions each time they log into the system. For more details on verifying the challenge questions, please click here.
  • If checked off, no challenge questions are presented
    • If checked on, a drop down for "Delivery Method" will display on the page.
    • By default, the system is delivered with "Enable Two Factor" option checked and "Email" option selected in the Delivery Method drop down. The System Administrator can alter this authentication setup based on how they want the user login verification to be done in the organization. For more details, pleaseclick here.


Based on the option selected in "Delivery Method" the users and new hires are asked to verify their identity through email and/or telephone when they self register, and each time they log into the system.


If no option is selected in Delivery Method for Two factor authentication, then the following error displays on the page:


Note: If the user's telephone number is not from USA (country code of the user's telephone number is not "001"), then irrespective of the value selected in "Delivery Method" for Two Factor authentication, the verification option will always be "Email" in the authentication page. 

  • If Two factor authentication is checked off, no validation of email or telephone is required

Enable e-PIN

  • If checked on, users and new hires are asked to setup their e-PIN at the time of self-registration. For more details, please click here.
  • If checked off, the user will not be asked to setup their e-PIN at the time of self-registration.
Self Registration link expires after 
  • If days are entered, the self registration link in the email invitation will expire after the days entered. The users and new hires have to use the link before it expires.
  • If no value is entered, the self registration link will not expire.
Allow same user account for multiple invitations
  • If checked on, the feature to link the User ID to multiple primary invitations is enabled. As default, this value is checked on. To view the details of adding multiple invitations to a same user account for New Hires and Admin Users, please click on the respective links.
  • If checked off, the feature to link the User ID to multiple primary invitations is disabled. 
Enable User Account Lock
  • If checked on, options are displayed to lock accounts on terminated or completed invitations.

By specifying the number of days in both or either of the fields, the System Administrator can set a lock on the user accounts associated with it after the mentioned days. Locking the account prevents users from accessing the system.

  • If checked off, no locking will be enforced on the user accounts.