Skip to main content

Security Settings

The M-Connect Global Settings → Security section is used to control user registration, authentication, and session capabilities. The following settings are available:

  • User Lockout Attempts - Determines the number of times an incorrect password and username combination can be entered before the account is locked
  • User Lockout Period - Determines for how long the account will be locked until the user can try again to access the account
  • Enable External User Registration - Displays the Registration button on the login page.
  • Enable External User Workflow - Determines whether or not new external users will be put through a workflow
  • New External User Workflow - Determines which workflow the new user should be put through
  • Minimum Password Length - Determines the minimum password length during external user registration.
  • Require Special Character - Determines if the password for the external user registration requires a special character.
  • Enable External User Session Tracking - Creates an External User Session Object in M-Files when a user logs into the portal. Requires the Extension Checklist to be complete.
  • External User Reset Password - Determines whether or not a user can reset their own password by displaying a button on the login page
  • JTW Session Timeout (Minutes) - Determines how long an idle session lasts before the user is automatically logged out.
  • Front End Idle Timer (Minutes) - Determines how much time passes before a user is warned for being idle.
  • Front End Idle Grace Period (Minutes) - Determines how much time a user has to renew their session after the warning message is displayed.
  • Auto-Save Frequency (Minutes) - Determines how frequently page edits are auto-saved. This value must be lower than Session Timeout.
  • Multi-Factor Authentication - When enabled, users will be allowed to enable e-mail based two-factor authentication.
  • Require Multi-Factor Authentication - When enabled, all users are required to use e-mail based two-factor authentication.