Overview
During the implementation stage, you have several choices when it comes to configuring authentication for your users.
Option 1- Single Sign-On
Your environment can be configured to use your company’s Single Sign-On (SSO) feature. This means your users will first log in to your company’s authentication platform (e.g. Active Directory) before accessing the platform.
This has several advantages, such as letting you manage the password policy of your users or reducing the number of passwords your users need to manage.
Information on how to implement Single Sign-On is available here.
Option 2- Two-Factor Authentication (2FA)
If you do not wish to implement SSO, you can rely on passwords and add a second authentication factor (e.g., a 6-digit code that expires after 30 seconds).
Information on two-factor authentication is available here.
Option 3- Passwords
If you’re not using SSO, you will at least use passwords managed within your environment.
Passwords are set by users upon their first connection, following an invitation sent by an Administrator.
Password Settings
Passwords must be at least 8 characters long.
Passwords must have at least 3 of the 4 character groups (0-9, a-z, A-Z, and special characters).
Users will need to reset their passwords after 6 unsuccessful attempts.
Password Expiration
Automatic password expiry is not enforced, in accordance with the National Institute of Standards and Technology (NIST) special publication guidelines on Digital Identities: “Verifiers SHOULD NOT require memorised secrets to be changed arbitrarily (e.g., periodically)." Please read NIST Special Publication 800-63B for more information.
Password Reset
Users can reset their passwords by selecting the Forgot password? link on the main login page. An invitation will then be sent to the user's inbox, requiring them to change their password.
Information about common login issues and their resolution can be found here.
Please note: API users can only use passwords.