Configuring Login Settings

Login settings define the login and password parameters for Billing users. By configuring these parameters you can:

• set the login requirements (see below);
• set the password quality requirements (see below);
• set the password expiration policy (see below);
• disallow your users to create passwords manually and require them to use the automatic password generation functionality. See Disallowing Manual Password Creation;
• require your own users as well as the users of your customers or resellers, or their service users to change the passwords which your users create for them. See Configuring One-Time Passwords.

Note: For a fresh Billing installation, the password quality level is set to High by default.

Editing login settings

1. Go to System > Settings > Security > Login Settings. Current login settings appear on the screen.
2. Click Edit. Login settings configuration dialog window is displayed. Fill out the form:
   • Specify the minimal length of the login (symbols) in the Min Login Length field.
   • Specify the maximal length of the login (symbols) in the Max Login Length field.
   • Select the Numbers Allowed check box if you want digits to be allowed in login.
   • Select the Special Characters Allowed check box if you want special characters to be allowed in login (refer to Password Checklist for information on special characters).
   • Input the message that you want to appear when customer tries to submit an incorrect login into the Incorrect Login Alert field.
   • Specify a regular expression to set a mask to cut disallowed characters from login in the Additional Login Mask Filter field.

     Note: Supported regular expression standards are POSIX Basic and POSIX Extended. Description of these standards is available over the internet, for example, here.

   • Select the Auto-generated Password check box to hide fields for manual password entry in the customer user creation (or editing) wizard in PCP and RCP.
   • Select the One-Time Password check box to enable users to create only one-time passwords for provider's users, reseller's users, customer's users, and service users.
   • Select the required password strength from the Password Quality Level group of options. Description of each level is shown on the screen below each of the options. The password quality level is applied to all users of all account types. For more details refer to Password Checklist.

   Important: The same password quality level as in Operations must be used.

   • Specify the password expiration policy (how frequently users will be forced to change their passwords). Password expiration policy is enabled and expiration period is set separately for provider (Billing installation owner) account users, resellers' accounts users, and customer accounts' users. To enable password expiration for provider, reseller, or customer accounts, select the corresponding Policy Enabled check box and enter password expiration period in days.
3. Click Save to confirm changes.