- Català: Aquesta pàgina no està traduida encara al català.
- Castellano: Esta página no está traducida aún al castellano.
Authentication¶
To manage the authentication policies you have to go to the Administration panel, press the button
Authentication policies¶
Different password policies can be applied in order to enhance the security of the platform.
Create¶
Look for the "Users policy" table and press the button
And a dialog box will appear with the following form:
Where it can be selected which category and role will the policy be applied to and the different restrictions applied to the users passwords:
- Digits: Minimum number of numerical digits.
- Character length: Minimum character length of the password.
- Lowercase chars: Minimum number of lowercase characters.
- Uppercase chars: Minimum number of uppercase characters.
- Special chars: Minimum number of special characters.
- No username: Whether the password can contain the username.
- Expiration days: Number of days until the password expires. For more information please refer to password expiration section.
- Old passwords: Number of old passwords to be remembered (current password can't be same as any of the last N passwords).
It can also be defined whether the email must be verified in order to use the platform. For more information please refer to email validation section.
Edit¶
Policies can be edited by pressing the icon next to the policy we want to update.
A dialog box will pop up with the same parameters as the creation one.
Important notes about the form fields
- The policy category and role fields can't be modified.
Delete¶
To delete a policy, press the button in the policies list.
Force reset¶
To force the reset, press the button in the policies list. And a dialog box will appear with the following options
- When clicking "Force Update Password" all the users with the policy applied will forced to update their password. For more information please refer to password expiration section.
- When clicking "Force Verify Email Password" all the users with the policy applied will forced to verify their email. For more information please refer to email validation section.
Email validation¶
When creating a policy with email verification, users will be required to enter an email address and validate it when accessing the platform (excluding users logged through external authentication providers).
Be careful
When enabling it, users won't be able to access the platform until an email is validated.
Once a user has logged in, the following screen will be shown
The user must write its email address and click on the "Send email" button. An alert will inform the user that a mail has been correctly sent to the given email address.
Then the following email will be sent to the given email for verification.
When clicking the "Verify email" button the user will be redirected to a page showing that the email has been succesfully validated.
Since the email has been validated, the next time the user logs in it will be able to access the platform.
Password expiration¶
When creting a policy expiration days, users will be required to update the password when accessing the platform (excluding users logged through external authentication providers).
Be careful
When enabling it, users won't be able to access the platform until its password is updated.
Once a user has logged in, the following screen will be shown. The blue alert box will show the password requirements for the user.
When clicking the "Update" button the users password will be updated and a green alert box will be shown, redirecting the user to the login page.
Since the password has been updated, the next time the user logs in it will be able to access the platform.