Corporation settings

Corporation settings establish the password parameters, such as password length, user non-use days, login attempts, as well as absolute timeout and auto-logoff for all properties within the corporation. Corporation settings come with the following defaults:

  • The number of invalid attempts before the user is locked out.

  • Enter a number greater than 1.

  • The number of days to pass in which the user does not log in.

  • Enter a number 1-90.

  • Enter the number of characters required for the password length.

  • Enter the number of passwords retained before a password can be reused.

  • Cannot be less than 11.

  • Set the number of days to pass before the new password expires. User receives notification.

  • Set the number of days to pass for HotSOS to automatically delete suspended users. The default is 365 days, but can be adjusted.

  • Required. Cannot be disabled.

  • Required. Cannot be disabled.

  • Absolute Timeout

    • The system logs off active users who reach this threshold. The default is 720 minutes.

    • Cannot set the threshold higher than 720 minutes nor lower than 15 minutes.

  • Inactivity Timeout

    • Inactivity forces log off when the threshold is surpassed. The default is 60 minutes.

    • Maximum inactivity is 120 minutes.

    • Cannot be set to less than 15 minutes.

  • Absolute Timeout

    • The system logs off active users who reach this threshold. The default is 720 minutes.

    • Cannot set the threshold higher than 720

  • Inactivity Timeout

    • Inactivity forces log off when the threshold is surpassed. The default is 60 minutes.

    • Maximum inactivity is 120 minutes.

    • Cannot be set to less than 15 minutes.

Define the frequency to prompt the end-user for their MFA credentials.

  • Every Login. Default. Each time the user logs in, HotSOS prompts for their MFA credentials.

  • 1 - 12 Represents the number of hours to pass before the user is prompted again for MFA.

Here's how it works

Your leadership decides to set the MFA Frequency to 3 hours. Once the user logs in and enters the MFA code, the timer starts. The user can log in and out any number of times without entering an MFA code. When the three hours is up, the system prompts the user to enter an MFA code and the cycle repeats.