OwnIdP Settings
This page outlines OwnIdP's configurable settings.
The OwnIdP settings can be accessed via the left menu on the main dashboard. The OwnIdP settings are grouped into three sections: Account, Email templates and Custom menu tab.
Each settings group can be updated via the Pencil button.
- 1.
- 2.
- 3.
In the Account section, the following account related settings can be configured:
- Login with: Change the login method to allow users to login with either username, email or both.
- Maximum failed login attempts: Specifies the maximum number of failed login attempts allowed before blocking the user.
- Require 2FA for admins: Checkbox specifies whether a two-factor authentication login is required for admin users.
- Require 2FA for users: Checkbox specifies whether a two-factor authentication login is required for regular users.
- Has email change permission: Checkbox specifies whether the users are allowed to change their email address or not.
- Password minimum length: Set the minimum number of characters a password must have. Minimum allowed is 8 characters.
- Password minimum digits: Set the minimum number of numerical digits that a password must have.
- Password minimum uppercase letters: Set the minimum number of uppercase letters that a password must have.
- Password minimum lowercase letters: Set the minimum number of lowercase letters that a password must have.
- Password minimum special characters: Set the minimum number of special characters that a password must have.
- Number of previous passwords that may not be used again: Set the number of previous passwords that the new password cannot match.
- Password expiration days: Set the number of days that a password is valid for before it must be changed.
- Allow common password: Allow passwords that are on the 'common password list'. For security reasons, it is recommended to not check this option.
- Timeout for blocked user: Specifies the number of seconds that the user will be blocked for after the maximum failed login attempts has been reached.
- No-reply email: Specify what email address should be used in the "From" field. Note: Add
include:amazonses.comto your SPF record if you want to allow Signicat to send the email from your address on your behalf. - Maximum inactive days: Specifies the maximum number of inactive days where the user has not had a successful login before the user account is deactivated.
- Maximum deactivated days: Specifies the maximum number of days when a deactivated account will be deleted (if the previous option was selected).
- Maximum session duration in minutes: Specified the maximum number of minutes a session can last before the user has to log in again.
- Delete user on organisation-user delete: If selected, this deletes the user account if the deleted organisation-user is the only account linked to this user.
- Delete deactivated user: If selected, this deletes the user account if the maximum deactivated days limit is reached.
- Account creation redirect URL: This is the URL for the 'Done' button on the success screen that a newly registered user sees after creating or linking their account.
- Maximum days before invitation expires: Specifies the number of days that the link in the invitation email is valid for.
- Sender's name for automated emails: The recipients of the automated emails get to see this name in the email "From" field.
- Custom attribute to be displayed on the 'Select your organisation' screen: If a user belongs to multiple organisations, this attribute is added behind the organisation name on the select organisation screen that is shown during login.
In this section, you can configure various email templates, including the invitation email and reset password email sent from OwnIdP. Both the subject and the content of the emails can be changed here. The email content is in HTML format with the possibility of inline styling. Plain text emails are also possible.
Examples of OwnIdP email templates
The following parameters can be used in the content of the invitation email:
- {{email_address}} for the email address of the recipient.
- {{invitation_url}} for the link to accept the invitation.
- {{invited_by}} for the full name of the user who is sending the invitation.
- {{organization_name}} for the name of the organisation that the user is invited to.
- {{roles}} for the recipient's roles in the organisation.
- {{site_name}} for the name of the site.
The following parameters can be used in the content of the reset password email:
- {{name_of_user}} for the name of the user who is receiving the email.
- {{password_reset_url}} for the link to the password reset page.
- {{requested_by}} for the name of the person who is requesting the password reset.
- {{site_name}} for the name of the site
In the Custom menu tab, you can add an additional custom menu item on the OwnIdP dashboard. This is useful for providing admins with a way to get back to the customer portal in the event of a redirect. Using the Pencil button, you can add and update custom menu tabs.
Update Custom menu tab dialog
Last modified 5mo ago