Applies To: AuthPoint Multi-Factor Authentication, AuthPoint Total Identity Security
Authentication and user settings are defined on the Settings page in the AuthPoint management UI. You can set and change these settings for users, tokens, and push notifications:
- Login Attempts — The number of consecutive times a manually created user can try unsuccessfully to log in to AuthPoint with a password before the user is blocked (this does not apply to users synced from an external identity).
- Authentication Attempts — The number of consecutive times a user can fail to successfully authenticate before a token is blocked. AuthPoint considers authentications that do not have a valid response to be failed authentication attempts. This includes incorrect one-time passwords, incorrect verification codes for QR code authentication, and push notifications that are not valid.
AuthPoint does not consider denied push notifications to be failed authentication attempts.
- Time Window — The allowed time difference between the server timestamp and token timestamp.
- QR Code Expiration Time — The amount of time that the token activation QR code and link are valid for.
- Quarantined User Cleanup — Enable this option to automatically remove LDAP synced users with the Quarantined status. You can choose to remove Quarantined users immediately or after a specified amount of time.