User Security
User Security configures how Owner users authenticate: password rules, sign-in limits, and MFA.
Go to Configuration → Company → User Security in Owner.
note
These settings apply to native username/password authentication. They do not apply when the company uses SSO.
Password Policy
| Setting | Notes |
|---|---|
| Minimum password length | Minimum 8 |
| Minimum uppercase letters | Default 1 |
| Minimum numeric characters | Default 1 |
| Minimum special characters | Default 1 |
| Password expiration frequency (months) | Optional; minimum 1 |
| Password history entries | 0–10; default 3 |
Sign-In Policy
| Setting | Notes |
|---|---|
| Maximum failed password attempts | 1–10; default 6 |
| Idle session timeout (minutes) | Optional; 10–1440. Changing this forces logout. |
| Maximum account inactivity (days) | Optional; 1–90 |
Multi-Factor Authentication (MFA)
| Setting | Notes |
|---|---|
| Enforce second-factor authentication | When enabled, all users must configure a second factor |
For SSO overview, see Security. For SAML setup and Azure Attributes & Claims, see SSO Configuration.