Single Sign On

Use Single Sign On

Selected, a Single Sign On (SSO) can be used for multiple applications. You can set up users at a system level, then have them manually or automatically log through to Companies. System users can be linked to a Windows login to be automatically logged into the system. See SYS Users.

You can only log in as a System User when this is Selected.

Unselected, when you turn off SSO, you will be prompted to delete all system user information. If you select this, all system users will be deleted.

See Single Sign On for more details on setting up SSO.

Note: Only the ACCREDO master User can select or unselect this option.

When SSO is not selected, if the ACCREDO user password is not the default password then the password is required when selecting Use Single Sign On (this will only be the case if SSO has been enabled/disabled previously).

If Single Sign On is selected the following settings apply:

Minimum Password Length

Set the minimum password length for all Users. If this is not set to 0, all Users must have a Password. If you increase the minimum password length, all users with a shorter password and with permission to change their password will be forced to change their password on login. Users with shorter passwords without permission to change passwords will need their password changed for them.

For Allow Windows Login, the minimum password length must be greater than zero.

Password Complexity

Require lower case

Selected, at least one lower case character is required in passwords.

Require upper case

Selected, at least one upper case character is required in passwords.

Require digit

Selected, at least one digit is required in passwords.

Require punctuation

Selected, at least one special character is required in passwords.

Multi-factor Authentication

One-time password enabled

Selected, users can be enrolled for, and Win and Web logins may require a One-time password (OTP).

Require one-time password for Win logins

Selected, Win logins will require OTP unless the user is exempted in System User - Users tab.

Note: Web Client OTP requirements are set per Client.

Prompt for one-time password entry every ... days

For Win logins. The number of days between OTP prompts. 0 means OTP is required for every login.

Expire Passwords every ... days

The number of days between password expiries. 0 means passwords will never expire.

Disallow password reuse within ... months

Track and prevent password reuse for a number of months. 0 means no restriction on reuse.

Exempt ACCREDO from expiry

Selected, the ACCREDO master user is exempted from password expiry, e.g. where the ACCREDO user is used in scheduled tasks.

Allow Windows Login

Selected, users can login using their Windows login. To select this, you must have a Minimum Password Length greater than zero.

Set up Windows User Names in the SYS Users form.

Prompt for Password every ... days

Enabled if Allow Windows Login is selected.

Windows users will be prompted for their password at an interval of the days entered. Defaults to 30.

0 means never prompt for Accredo password, i.e. Windows password is all that is required.

Audit Successful Logins and Logouts

Selected, successful login and logout will be logged in the System Audit Log.

Clear, only failed login attempts are logged.